Overview
When you scan computers running legacy Microsoft products, Windows 7 and Windows Server 2008/R2, you are getting an error message "A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider."
Solution
This is an error returned by Windows. It is caused by Microsoft's decision in late July 2020 to discontinue Windows Update for SHA-1 based endpoints. In other words, older Windows devices that have not updated to SHA-2 no longer receive updates through Windows Update.
To find out more about the Windows devices impacted and how to update them to SHA-2, please refer to the Microsoft article Windows Update SHA-1 based endpoints discontinued for older Windows devices.