Installation Failure: Cabinet File Has an Invalid Digital Signature

The installation of the ProfileUnity Management Console might fail if automatic root certificate updates are not allowed and the current certificate is out-of-date.

This can be resolved by either of the following actions:

  • Changing settings to allow Automatic Root Certificate Updates
  • Manually updating the appropriate root certificate.

Changing Settings to Allow Automatic Root Certificate Updates

  1. From a command prompt, type gpedit.msc (or use Group Policy Tools on a domain controller for domain-based settings).
  2. Click OK to open the Local Group Policy Editor.
  3. Go to Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings.
  4. Double-click Turn off Automatic Root Certificates Update.
  5. Click Disabled.
  6. Click OK.
  7. Exit the Local Group Policy Editor.
  8. Install or re-install ProfileUnity.

Manually Updating the Appropriate Root Certificate

  1. Download the following certificates.

    https://cacerts.digicert.com/DigiCertTrustedRootG4.crt.pem

    https://cacerts.digicert.com/DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt.pem

  2. Rename the file extension from .pem to .cer.
  3. Right-click DigiCertTrustedRootG4.crt.cer and select Install Certificate.
  4. Manually select the Trusted Root Certificate Authorities store and finish the wizard.
  5. Right-click DigiCertTrustedG4CodeSigningRSA4096SHA3842021CA1.crt.cer and select Install Certificate.
  6. Manually select the Intermediate Certificate Authorities store and finish the wizard.
  7. Install or re-install ProfileUnity.