Surface RT/Surface 2: Update KB4516067 revokes certificates

[German]A brief information for owners of a Surface RT (or all Surface models with 32-bit Windows 8.1 RT): With update KB4516067 Microsoft has accidentally revoked the certificates so that Internet Explorer can no longer be used.


Update KB4516067 declares certificates invalid

MVP colleague Barb Bowman has pointed in a tweet what happened with update KB4516067 for Windows 8.1 RT.


Susan Bradley weist bei ebenfalls auf das Problem hin. Wer das Update KB4516067 installiert, kann anschließend den Internet Explorer 11 nicht mehr für https-Seiten verwenden. Denn das Update zieht alle Zertifikate zurück – wenn der IE 11 ein Zertifikat validieren möchte, ist dieses dann ungültig. Das Ganze wurde im Microsoft Answers-Forum in diesem Thead thematisiert.

Latest Windows update pushed 9/10/19 causes Internet explorer to not run on my surface 2.

Latest Windows update causes Internet explorer to not run on my surface 2. Update was pushed 0n 9/10/19.

Error: The certificate has been revoked by its certification authority. See DefaultBrowser_NopublisherId in event viewer.

I saw that the update pushed a new version of I.E.

Uninstalling the 4 updates fixes the problem. Reinstalling the updates and the problem comes back. Must be a problem with the update. Can't install a different browser on Windows RT. Update basically turns the surface 2 into a boat anchor. Had to make registry hack to shut off windows update. Why can't we get help from Microsoft when they break stuff?

The user installed the update KB4516067 issued on September 10, 2019. After that the Internet Explorer threw him an error message of the kind:


The certificate was revoked by his certification authority. See DefaultBrowser_NopublisherId in the Event Viewer.

This affects Surface RT as well as Surface 3 users, as Barb Bowman states in the thread. If we now postulate that Microsoft does not intend to withdraw the Surfaces from use, a bug has slipped into the update. After publishing the German article I received a mail from German blog reader Matthias D. (thank you), who confirmed the issue.

Hello, Günter,

is rather marginal, since Windows 8.1 RT (on Surface 2) is not quite as common, but still does its job for rudimentary tasks.

Since the patchday in September, after the installation of KB4516067 [September 10, 2019-KB4516067 (Monthly Rollup)], the Internet Explorer no longer works (see screenshot); the app-based IE closes without comment.

The problem does not occur on systems with Windows 8.1 x64. Solution: Uninstall KB4516067.

Remedy: Uninstall update and block installation

The remedy is simple under Windows 8 RT or Windows 8.1 RT. You uninstall updates KB4516067 and block it for further installation. This should make Internet Explorer 11 surf again. If this does not help, only a refresh (reset) of the surface with update blockade remains. Barb Bowman also asks the rhetorical question:

Concerning the question I was asked (several times within my German blog), how we can block the updates: Windows RT doesn't have an update control like Windows 8.x. But you can use the registry key described within this blog post.

Cookies helps to fund this blog: Cookie settings

This entry was posted in devices, issue, Update, Windows and tagged , , , , . Bookmark the permalink.

3 Responses to Surface RT/Surface 2: Update KB4516067 revokes certificates

  1. Pippi says:

    junge junge ….was ein Mist…und kann jemand mal BITTE eine Anleitung beigeben wie man dem Bescheuerten Surface die KB daran hintern kann (Blocken)
    Wie Blockt man den so eine KB ?
    eine Schritt für Schritt Anleitung wäre nett

  2. Jukka says:

    No onpas kiva, 8.1 ei todellakaan suostu avaamaan ie:tä tämän päivityksen jälkeen. Sitten on vielä sellainen laite (Nokia 2520) missä ei käsittääkseni pysty päivityksiä asettamaan karanteeniin? Joku voi kertoa jos se onnistuu 😉

    Please post in English – here is the translation:

    Well nice 8.1 does not really agree to open ie after this update. Then there is a device (Nokia 2520) where I do not understand that updates can be quarantined? Someone can tell if it succeeds 😉

Leave a Reply

Your email address will not be published. Required fields are marked *