After applying KB2677070, SPTimerV4 and Claims to Windows Token Service Fail

After applying KB2677070, the SharePoint Timer Service (SPTimerV4) and Claims to Windows Token Service fail to start. This will occur if the SharePoint Server(s) do not have Internet access (tcp/443) in order to update the root server certificates from Microsoft.

In this case, manually download and install the new root certificates on the SharePoint Server(s):

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab

Trevor Seward is a Microsoft Office Apps and Services MVP who specializes in SharePoint Server administration, hybrid scenarios, and SharePoint Online. He has been working with SharePoint for 16 years from SharePoint 2003 on up, managing environments with terabytes of content for 150,000+ user organizations. Trevor is an author of Deploying SharePoint 2016 and Deploying SharePoint 2019. You can find him on Twitter and in /r/sharepoint.