
Trusted certificates are updated by Windows Update. However, automatic updates may be turned off, manually or by GPO.
The simplest would be to re-enable trusted root certificate update.
To manually install the required root certificate:
1. Download the AddTrust External CA Root certificate from Comodo (UPDATE see next post for SHA-2 certificate link).
2. Double-click on the file and click on "Install certificate". 3. Click "Next >"
4. Check "Place all certificates in the following store", click on "Browse" and select "Trusted root certification authorities". 5. Click "Next >" to complete.