Error: Update installation was blocked, digital signature mismatch

[mpande]

Hello! Our current digital certificate is set to expire is several days.

We have purchased a new one with an identical CN as described on this page: https://www.advancedinstaller.com/what- ... icate.html

Inside the aip we have specified the new certificate under Digital Signature / Settings.
Also inside the aip under Updater we have "Install only digitally signed update packages signed with the same certificate as the Updater" checked, just as it has been for our previous version installations.

After building the installer we are manually signing it using the current (about to expire) certificate using the as argument, meaning the installer file is double signed.

When we try to run the updater we get the error message "Error: Update installation was blocked, digital signature mismatch"

We also get this message if we do attempt an update using an installer signed with just the new certificate.

Our new certificate is different in that it doesn't have an L field in the subject, but beyond that and the dates it is identical to the original certificate.

This is very time sensitive to us. What do we need to do to allow the updater to accept the new certificate?

[mpande]

To be clear, in the post above I'm describing updating from an older version of our software signed with the original about to expire certificate to the new version of our software signed with our new certificate.

[Catalin]

Hello Max,

Here are the steps you should follow for your scenario:

How to install only digitally signed update packages

Hope this helps!

Best regards,
Catalin