Installation Failure: Cabinet File Has an Invalid Digital Signature

The installation of the ProfileUnity Management Console might fail if automatic root certificate updates are not allowed and the current certificate is out-of-date.

This can be resolved by either of the following actions:

  • Changing settings to allow Automatic Root Certificate Updates
  • Manually updating the appropriate root certificate.

Changing Settings to Allow Automatic Root Certificate Updates

  1. From a command prompt, type gpedit.msc (or use Group Policy Tools on a domain controller for domain-based settings).
  2. Click OK to open the Local Group Policy Editor.
  3. Go to Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings.
  4. Double-click Turn off Automatic Root Certificates Update.
  5. Click Disabled.
  6. Click OK.
  7. Exit the Local Group Policy Editor.
  8. Install or re-install ProfileUnity.

Manually Updating the Appropriate Root Certificate

  1. Go to https://www.websecurity.digicert.com/theme/roots
  2. Click the Active Roots link to browse through the list.
  3. Scroll down the list and find the Generation 5 (G5) root entry.
  4. Download the Generation 5 (G5) root certificate using the link given.
  5. Rename the file extension from .pem to .cer.
  6. Right-click the CER file and select Install Certificate.
  7. Manually select the Trusted Root Certificate Authorities store and finish the wizard.
  8. Install or re-install ProfileUnity.