LZMA workaround (as suggested in another thread mentioned here) worked. It does pop up the warning but allows installation to continue.
We guess CA Root Certificates on that server were probably out of date as it did not have internet access (although it was setup to receive updates from another server).