KB 3118401 Error

[jsachs]

ERROR: Digital signature. KB 3118401 is not installed. Selected "signtool.exe" requires the Windows update known as "Update for Universal C Runtime in Windows, KB 3118401".

I am running Windows 10 and Advanced Installer was working fine until I tried installing Visual Studio 2019, had problems with it, and uninstalled it and reinstalled Visual Studio 2017.

signtool.exe is present in the location specified in External Files.

KB 3118401 is only for older operating systems and cannot be installed on Windows 10, so the error message is not helpful.

Please advise.

Jonathan Sachs

[jsachs]

I just tried the same thing on my other development computer which I did not install VS 2019 on and got the same error. Could it be a recent Windows update causing the problem? I recently installed the latest updates to 1909.

winver.jpg (13.67 KiB) Viewed 7551 times

[jsachs]

Or maybe because I recently extended my service contract?

[Daniel]

Hi,

I am not so sure why this happens. Just tested the scenario but cannot replicate any such error.

Could you please send us a screenshot with the settings you configured in "Digital Signatures" page of your setup project? And please also open Advanced Installer, go to "Files -> Settings -> External Tools" and let us know what path do you have configured in "SignTool.exe" field?

All the best,
Daniel

[jsachs]

Here are the screen shots:

ss1.jpg (263.01 KiB) Viewed 7529 times

ss2.jpg (158.72 KiB) Viewed 7529 times

As far as I know, this was all working until a couple of days ago and I have not changed any of the settings, at least not intentionally.

Can you be more specific about what the error message actually means?

Jonathan Sachs

[Daniel]

Hi Jonathan,

The error message is generated by a check we perform to determine that SignTool.exe and its dependencies are installed and correctly functioning on current machine.

After further investigating on this it seems the behavior is caused by a recent issue Microsoft introduced with their latest system update: February 27, 2020—KB4535996. After this Windows system update it seems SignTool.exe no longer works.

We reported this issue to Microsoft and will be waiting for a fix.

Until Microsoft fixes this bug the only workaround we found so far is to manually rollback/uninstall KB4535996 system update.

All the best,
Daniel

[jsachs]

OK, thanks for checking it out. Uninstalling KB4535996 fixed the problem.

[Catalin]

You are always welcome, Jonathan!

We will update this thread as soon as a fix will be available.

Best regards,
Catalin

[Daniel]

Hi,

Just tested and I can confirm there is a workaround solution. Have a look on "Re: SignTool.exe gets broken after February 27, 2020—KB4535996 Windows Update".

All the best,
Daniel

[jsachs]

Just confirming the workaround also works here.

Jonathan Sachs

[Catalin]

Hello Jonathan,

Thank you for your followup on this.

We are glad the workaround did its job.

Best regards,
Catalin