Microsoft Download Center no longer provides SHA-1 verification codes for security reasons
Microsoft has been gradually replacing the hash value check of the security update since two years ago because theoretically the SHA-1 check code can be forged and is therefore not secure enough.
Therefore, Microsoft replaced the hash value of all the security update checks in Windows 8 and Windows 10 with SHA-256 value. If the hash value is different, it is considered insecure.
Windows 7 replaces the verification mechanism in previously launched security updates, and now Windows 7 that has not been updated will not be able to install any security updates.
The security update provided by the Microsoft Download Center previously provided both SHA-1 and SHA-256 values, and the file name will be directly attached to the SHA-256 value to facilitate verification.
After deciding to abandon SHA-1, Microsoft will abolish the SHA-1 in the Download Center from today. From today on, Microsoft will no longer provide SHA-1 verification for security updates.
Microsoft stated that we are using a stronger verification algorithm to enhance security. For this, you need to use the SHA-256 value to ensure the safety of your downloading updates. If you use Windows 7 SP1, Windows Server 2008 R2, Windows Server 2008 SP2, you need to get critical updates first.
Users will not be able to get any security updates without installing critical updates, because the old version cannot complete the verification work after these patches are replaced with the SHA-256 verification code.
Windows 8 and above have native support for SHA-256 verification, so there is no need for any operation and will not affect the reception of the latest security updates and installation.
The Windows 7 version does not natively support the SHA-256 verification patch, so you must install the key update released by Microsoft before you can continue to update.
Enterprise administrators can click here to download the critical update. Of course, Windows 7 has ended support. If the enterprise has not paid for the extension, it cannot be updated.
