Added new cert

Author: johnmarco

articles/azure-arc/servers/troubleshoot-extended-security-updates.md

@@ -1,7 +1,7 @@
 ---
 title: How to troubleshoot delivery of Extended Security Updates for Windows Server 2012 through Azure Arc
 description: Learn how to troubleshoot delivery of Extended Security Updates for Windows Server 2012 through Azure Arc.
-ms.date: 02/20/2024
+ms.date: 05/21/2024
 ms.topic: conceptual
 ---
 
@@ -80,6 +80,7 @@ If you're unable to allow access to the PKI URL from your servers, you can manua
     1. [Microsoft Azure TLS Issuing CA 02](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2002%20-%20xsign.crt)
     1. [Microsoft Azure TLS Issuing CA 05](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2005%20-%20xsign.crt)
     1. [Microsoft Azure TLS Issuing CA 06](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20TLS%20Issuing%20CA%2006%20-%20xsign.crt)
+    1. [Microsoft Azure RSA TLS Issuing CA 04](https://www.microsoft.com/pkiops/certs/Microsoft%20Azure%20RSA%20TLS%20Issuing%20CA%2004%20-%20xsign.crt)
 1. Copy the certificate files to your Windows Server 2012 (R2) machines.
 1. Run any one set of the following commands in an elevated command prompt or PowerShell session to add the certificates to the "Intermediate Certificate Authorities" store for the local computer. The command should be run from the same directory as the certificate files. The commands are idempotent and won't make any changes if you've already imported the certificate:
 
@@ -88,6 +89,7 @@ If you're unable to allow access to the PKI URL from your servers, you can manua
     certutil -addstore CA "Microsoft Azure TLS Issuing CA 02 - xsign.crt"
     certutil -addstore CA "Microsoft Azure TLS Issuing CA 05 - xsign.crt"
     certutil -addstore CA "Microsoft Azure TLS Issuing CA 06 - xsign.crt"
+    certutil -addstore CA "Microsoft Azure RSA TLS Issuing CA 04 - xsign.crt"
     ```
 
 1. Try installing the Windows updates again. You may need to reboot your computer for the validation logic to recognize the newly imported intermediate CA certificates.