Download rootsupd.exe (the last 2021 certificate update) from a modern machine. Copy via USB. Run it first. Without this, none of the legacy update clients can talk to their servers.

Related search suggestions provided.