Signed Installer fails on Computer without Internet Connection

[aho]

Hi all,
my installer is signed.
When I run the installer on a computer which was not connected to the internet for a long time, the installation fails with this error:

MSI (s) (84:C4) [14:50:27:974]: Product: [...] -- Error 1330. A file that is required cannot be installed because the cabinet file c:\Users\[...]\Setup_x641.cab has an invalid digital signature. This may indicate that the cabinet file is corrupt. Error 266 was returned by WinVerifyTrust.


What can be done, to make the installer work on a computer which has no Internet connection?

Best Regards,
Andreas

[Catalin]

Hello Andreas,

Some trusted certificate authorities require internet connection to validate the certificate, some don't. In this case, it seems that yours is requiring.

In order to avoid this issue on a machine that does not have an active internet connection, the Operating System should already have cached in memory the certificates you use to sign the installer. This way, if the certificate is already present (cached or manually installed) the Windows Installer will be able to verify the signature.

When manually installed, the certification should be installed in the "Trusted Root Certification Authorities" store.

For more information about this, please have a look on the Microsoft "How Certificate Revocation Works" article which may come in handy.

Hope this helps.

Best regards,
Catalin

[Catalin]

Hello Andreas,

Upon further investigation, as a workaround, you can also try to archive the installation file using LZMA compression. To do so, you can go to "Builds" page and select the "Archive installation files using LZMA compression" option from under the "Archive" section.

Hope this helps.

Best regards,
Catalin

[aho]

Hi Catalin,
thanks for your replys!

Some trusted certificate authorities require internet connection to validate the certificate, some don't.

Can you suggest some certificate authorities which do not require internet connection for validation?

Thanks,
Andreas

[Catalin]

Hello Andreas,

Can you suggest some certificate authorities which do not require internet connection for validation?

I think that here, the appropriate approach would be to ask the Support team of the certificate vendor. I think their answer would be a better fit in this case as they are more knowledgeable about certificates.

Here is a thread:

viewtopic.php?f=5&t=1815

in which our users have previously discussed about certificates.

Hope this helps.

Best regards,
Catalin