This hotfix was later superseded by KB3072630 , which included the same functionality along with additional updates. Important Limitations
PTB (Português do Brasil / Brazilian Portuguese)
The full filename for the Brazilian Portuguese version of this update is . The name reveals its key specifications:
The primary function of KB968730 is to allow Windows XP and Server 2003 clients to obtain and process certificates from a (or newer) that uses SHA-2 encryption (SHA-256, SHA-384, or SHA-512). Without this update, these legacy systems cannot recognize modern security certificates, leading to various connectivity and authentication errors. Key issues resolved by this hotfix include: windows xp kb 968730 x86 ptb hotfix
Embedded systems using XP to communicate with newer security certificate infrastructures.
: Enables Windows XP SP3 to process and enroll certificates signed with SHA-2 hashes .
: Addresses an issue where clients cannot obtain certificates from a Windows Server 2008 (or newer) Certificate Authority (CA) if that CA is configured to use SHA-2 encryption. This hotfix was later superseded by KB3072630 ,
KB968730 is a specific hotfix released by Microsoft to enable on legacy Windows operating systems. A hotfix is a software update designed to address a particular issue or bug, which in this case, was the inability of older Windows clients to process modern digital certificates.
In 2007, Microsoft released a hotfix, KB968730, for Windows XP x86 (32-bit) systems. The hotfix was designed to address specific issues and improve the overall stability and security of the operating system. This article provides an in-depth look at the Windows XP KB968730 x86 PTB (Portuguese - Brazil) hotfix, its purpose, and the changes it brings.
Windows XP was built during an era when Secure Hash Algorithm 1 (SHA-1) was the standard for digital certificates and web security. However, as computational power grew, SHA-1 became vulnerable to collision attacks, making it obsolete. Without this update, these legacy systems cannot recognize
Windows XP updates are language-specific. Applying an English (ENU) hotfix to a Portuguese-Brazil (PTB) system will either fail during installation or corrupt localized system files.
This hotfix is often the "missing link" for Windows XP SP3 systems that need to access modern websites or connect to Windows Server 2008/R2 Certificate Authorities.
Windows XP Service Pack 3 does not natively support SHA-2 certificates for certificate enrollment. If your system needs to obtain certificates from a Windows Server 2008 (or newer) Certificate Authority (CA) using SHA-2 256 or higher, you will likely encounter Event ID 13 ("Automatic certificate enrollment... failed"). Key Details
