Unable to update Servicing Stack on Windows 7

Question

I know Windows 7 is EOL - this is a computer used in a manufacturing environment and cannot be replaced with Windows 10. I have a number of security updates stuck because SHA-2 signing is not recognized. It would appear that KB4474419 is installed but KB4490628 is not. If I download from the Update Catalog the install aborts claiming the update is not applicable. I tried backtracking the patch line and found the following:

KB3020369 is already installed
KB3177467, KB4490628 and any newer SSU: not applicable

I've tried everything I can think or to repair/reset Windows Update and nothing has changed. CBS.log doesn't appear to have any helpful information. Any thoughts?

2022-09-06 15:19:29, Info CBS Session: 30982718_3139819157 initialized by client WindowsUpdateAgent.
2022-09-06 15:19:29, Info CBS Read out cached package applicability for package: Package_for_KB4490628~31bf3856ad364e35~amd64~~6.1.1.2, ApplicableState: 64, CurrentState:0

Answer 1

Please run the system update readiness tool.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB947821

Then post the results of;
%SYSTEMROOT%\Logs\CBS\CheckSUR.log

Answer 2

Can you be more specific? There are a couple dozen downloads under that KB and they all appear to contain nothing more than manifest and cat files.

Answer 3

Is this what you're asking for?238267-checksur.log

Answer 4

I hope I'm doing this right.238401-checksur.log

Answer 5

You could try removing any language packs or also try a repair install by running setup.exe from the root of the install media.

--please don't forget to upvote and Accept as answer if the reply is helpful--