{"id":10823,"date":"2019-08-21T00:02:00","date_gmt":"2019-08-20T22:02:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=10823"},"modified":"2021-01-24T11:56:02","modified_gmt":"2021-01-24T10:56:02","slug":"windows-7-reinstallation-causes-boot-error-0xc0000428","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/08\/21\/windows-7-reinstallation-causes-boot-error-0xc0000428\/","title":{"rendered":"Windows 7: Reinstallation causes boot error 0xc0000428"},"content":{"rendered":"

\"win7\"[German<\/a>]Users reinstalling Windows 7 SP1 may get the boot error 0xc0000428. This can be caused by a missing Bitlocker patch. Here is some information about the problem and why it might occur. <\/p>\n

<\/p>\n

The error code 0xc0000428<\/h2>\n

\"\"The error 0xc0000428 stands for STATUS_INVALID_IMAGE_HASH – the hash of the image is invalid. The corresponding error text is: <\/p>\n

\n

\"Windows cannot verify the digital signature for this file. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.\"<\/p>\n<\/blockquote>\n

An error occurred during signature verification of the boot files. The system refuses to boot because the hardware or software has been modified (something may have been damaged or overwritten by malware). <\/p>\n

\n

If you search for the error code, you will find it in the NeoSmart Knowledge-Base<\/a>, for example. The causes mentioned there, such as outdated boot manager (BootMgr), wrong version of the boot disk, etc., have been known for years. In the current scenario, however, this is not the case. <\/p>\n<\/blockquote>\n

Problem: New installation of Windows 7 SP1<\/h2>\n

Let's get to the issue, which is the subject of this blog post. Some users will reinstall systems with Windows 7 SP1 in the coming months. Problems are installation media that have been adapted using DISM and extended by SHA-2 support.<\/p>\n

Background: Windows 7 SP1 installation image with SHA-2 support<\/h3>\n

Microsoft has changed the signing of update packages from August 2019 to SHA-2-only. The dual signing with SHA-1 and SHA-2 has expired. I had about blogged about that (see at the article end). Without SHA-2 support, Windows 7 SP1 will not be able to install new updates released after August 2019. In my blog post Windows Updates KB4512506\/KB4512486 drops error 0x80092004<\/a>  I pointed out that Windows 7 Service Pack 1, Windows Server 2008 R2 Service Pack 1 and Windows Server 2008 Service Pack 2 must have the following SHA-2 updates installed.<\/p>\n