Dan
Posts: 4513
Joined: Wed Apr 24, 2013 3:51 pm

Install error because of the .CAB file that has an invalid digital signature

Fri Jul 22, 2022 2:17 pm

Hello,

During installation, there might be an error displayed that the CAB file has an invalid digital signature. The error is displayed during the ProgressDlg:
A file that is required cannot be installed because the cabinet file <path>. cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.
invalid_signature.png
invalid_signature.png (9.76KiB)Viewed 338501 times

If looking in the Digital Signature details, you may see the following message:

digital signature details.png
digital signature details.png (7.71KiB)Viewed 338498 times


This is typically caused in a disconnected environment where the trusted certificate authorities are not updated automatically.

Also, when using the new timestamping Cross-Root certificates, the /ac parameter must be used. Read more about in the Authenticode Signature Verification Fails with New Timestamping Cross-Root article.

The following command line will address this case:

Code: Select all

sign /ac "PathToCert\CodeSigningCrossCert.crt" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a /d "[|Manufacturer]" 

To use the above command line, select the Custom option for the SignTool in the Digital Signature page and configure it as below:

Custom option dig sig.png
Custom option dig sig.png (38.5KiB)Viewed 338501 times


Hope this helps!

Best regards,
Dan
Dan Ghiorghita - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Common Problems”