Posts: 4524
Joined: Wed Apr 24, 2013 3:51 pm

Install error because of the .CAB file that has an invalid digital signature


During installation, there might be an error displayed that the CAB file has an invalid digital signature. The error is displayed during the ProgressDlg:
A file that is required cannot be installed because the cabinet file <path>. cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.
invalid_signature.png (9.76 KiB) Viewed 378013 times

If looking in the Digital Signature details, you may see the following message:

digital signature details.png
digital signature details.png (7.71 KiB) Viewed 378010 times

This is typically caused in a disconnected environment where the trusted certificate authorities are not updated automatically.

Also, when using the new timestamping Cross-Root certificates, the /ac parameter must be used. Read more about in the Authenticode Signature Verification Fails with New Timestamping Cross-Root article.

The following command line will address this case:

Code: Select all

sign /ac "PathToCert\CodeSigningCrossCert.crt" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a /d "[|Manufacturer]" 

To use the above command line, select the Custom option for the SignTool in the Digital Signature page and configure it as below:

Custom option dig sig.png
Custom option dig sig.png (38.5 KiB) Viewed 378013 times

Hope this helps!

Best regards,
Dan Ghiorghita - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Common Problems”