Dan
Posts: 4524
Joined: Wed Apr 24, 2013 3:51 pm

Install error because of the .CAB file that has an invalid digital signature

Hello,

During installation, there might be an error displayed that the CAB file has an invalid digital signature. The error is displayed during the ProgressDlg:
A file that is required cannot be installed because the cabinet file <path>. cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.
invalid_signature.png
invalid_signature.png (9.76 KiB) Viewed 373730 times

If looking in the Digital Signature details, you may see the following message:

digital signature details.png
digital signature details.png (7.71 KiB) Viewed 373727 times


This is typically caused in a disconnected environment where the trusted certificate authorities are not updated automatically.

Also, when using the new timestamping Cross-Root certificates, the /ac parameter must be used. Read more about in the Authenticode Signature Verification Fails with New Timestamping Cross-Root article.

The following command line will address this case:

Code: Select all

sign /ac "PathToCert\CodeSigningCrossCert.crt" /tr http://timestamp.digicert.com /td sha256 /fd sha256 /a /d "[|Manufacturer]" 

To use the above command line, select the Custom option for the SignTool in the Digital Signature page and configure it as below:

Custom option dig sig.png
Custom option dig sig.png (38.5 KiB) Viewed 373730 times


Hope this helps!

Best regards,
Dan
Dan Ghiorghita - Advanced Installer Team
Follow us: Twitter - Facebook - YouTube

Return to “Common Problems”