Failed authenticode verification during Visual Studio 2015 Enterprise install

Article
2016-06-29

Question

_{Wednesday, June 29, 2016 10:34 PM}

I downloaded the Visual Studio 2015 With Update 3 iso from MSDN Subscriber downloads. During installation I get the following errors:

"Error 0x8007010a: Failed authenticode verification of payload: c:\Visual Studio 2015 with Update 3\packages\vx_bxhub\VSHub_Core.msi"

"Error 0x8007010a: Failed to verify signatureof payload: vs_vshubcore"

I am running Windows 7 Enterprise Service Pack 1. I have disabled anti-virus, verified the iso checksum is correct, and ran as administrator. Still the same problem. Any help is appreciated.

Thanks!

Jon

All replies (11)

_{Wednesday, July 27, 2016 4:49 PM ✅Answered}

Sara,

I gave this information to my system administrator and we were able to install successfully! It turns out we were missing 3 Microsoft Root Authority certificates that were required. It seems that these problems could be detected and reported. It would be nice if the installer could tell us that a certificate was missing instead of telling us that a setup file doesn't exist when it does exist. Very confusing. It could also tell us to download using the /layout switch if needed. Here is what we needed to do to get everything isntalled:

1) Run the setup with a /layout switch on a connected maching to download the offline version.

On the isolated machine:

2) Presetup requirements (Windows Update, IE11, Turn off AntiVirus, run as admin, etc)

3) Install the following root certificates (others may be needed, these are only the ones we were missing)

-Microsoft Root Authority 2010

-Microsoft Root Authority 2011

-Microsoft Time-stamp PCA 2010

4) Copy the 22.5 offline version and install.

Thank you for the support!

Cheers,

Jon

_{Thursday, June 30, 2016 6:13 AM}

Dear Leodox,

Welcome to the MSDN forum.

Since you used the ISO to install and meet this error, could you please have a try with the web installer?

Please make sure Windows update already up-to-date to excludes the pending patches blocked the installation.

According to the error message “Error 0x8007010a: Failed authenticode verification of payload: c:\Visual Studio 2015 with Update 3\packages\vx_bxhub\VSHub_Core.msi”, if you directly run the VSHub_Core.msi and see if the same issue happens or not.

Meanwhile, please have a look at the following methods:

1. Please run the Fixit tool: https://support.microsoft.com/en-us/mats/program_install_and_uninstall/en-us?wa=wsignin1.0

Automatically repair issues that block program installation or removal because of corrupted registry keys.

2. Run the command: sfc /scannow in the elevated command prompt to scan for corruptions in Windows system files and restore corrupted files.

3. This could appear if the “Certificate Revocation List” checking is switched off.

To switch on “Certificate Revocation List” checking, please change the value of the following registry key:

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing\State

The value should be 23c00.

State REG_DWORD 0x00023c00

So once the CRL checking is turned on and the certificate of the application that we are installing is valid, the install is successful.

If the issue still persists, I need your help to the VS installation log. Please use http://aka.ms/vscollect to gather the installation logs. After using it, you will find vslogs.zip under %temp% folder. Please upload the file to https://onedrive.live.com/ and share the link here.

Best regards,

Sara

We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.

_{Thursday, June 30, 2016 6:00 PM}

Sara,

Thanks for the quick reply!

I can't try the web-installer. Unfortunately, my machine is isolated and can not be connected to the internet. Also, we do not have automatic update capability, so I am running a clean install of Windows 7 Enterprise SP1 with no automatic-updates. Currently VS2012 and .Net 4.5 and 4.6.1 are installed and working well. I installed IE11 as well prior to attempting to install VS2015.

If I run VSHub_Core.msi directly, it apears to run fine with no errors.

1) I have downloaded and ran MicrosoftFixit-portable.exe and it gives an error "code 80072EE7: Error trying to contact the server."

2) I ran sfc /scannow and it completed with no error found.

3) I check the CRL registry entry and it was already correctly set to 0x23c00.

If you need the logs, is there an offline utility to gather them, or a way to do it manully? It is complicated to export files, so any support without logs is appreciated, but I can export them if required.

Thanks!

Jon

_{Friday, July 1, 2016 9:41 AM}

Dear Leodox,

Thank you for your update.

Since your computer cannot connect to the internet network, I recommend you download an offline installer not the ISO file to install, you need to create an offline installation layout by using a machine that is connected to the Internet, what's more, please see here: https://msdn.microsoft.com/en-us/library/mt706497.aspx

About the installation logs, it locates under the %temp% folder and you can clean up %temp% then re-run the installer, the name of the installation log file is similar like 'dd_vs_...', find the latest log file and upload it to the https://onedrive.live.com/ and share the link here.

Best regards,

Sara

_{Friday, July 22, 2016 9:44 PM}

Sara,

I was finally able to get the /layout version downloaded and transferred to my isolated machine. I have verified the size of the download as referenced in this post: https://social.msdn.microsoft.com/Forums/vstudio/en-US/54c1e0f6-6b1c-4535-ae1d-31c1d7e7e857/vs2015-unable-to-completly-install-offline?forum=vssetup. My downloaded size is a little bit larger that the one you mentioned in that post because it has a few extra files. When I run the setup and choose a default install, it fails with the same errors as mentioned in this post: https://social.msdn.microsoft.com/Forums/vstudio/en-US/2c4575ed-8617-401a-bf01-54d664d71cba/setup-packages-when-installing-vs2015-pro-update-3-on-win7sp1-from-iso-file?forum=vssetup. The files are all where they should be. I doubt it is an invalid download because I verified the checksum and I can run vsHub_Core.msi directly and it runs fine by itself. The log has the same 0x8007010a error as mentioned in my first post and I also saw a 0x800b010a error.

I have gone through all the same steps mentioned multiple times in all of these posts -- download with /layout, turn off anti-virus, run as admin, sfc /scannow, check the CRL, update windows, etc. The results are the same on several different machines and freshly imaged VMs. Clearly, there is another problem with the offline installer. I will attempt to get the logs collected and posted for you, but I may not be able to due to the nature of the isolated network. Please help us get this prduct installed.

Thanks,

Jon

_{Monday, July 25, 2016 9:16 AM}

Dear Jon,

>>I doubt it is an invalid download because I verified the checksum and I can run vsHub_Core.msi directly and it runs fine by itself.

The checksum is display as expected? After you directly run the vsHub_Core.msi successfully, please re-run the VS installer again.

Please share the latest installation log if you can, it will help us to analysis this issue.

Best regards,

Sara

_{Monday, July 25, 2016 3:38 PM}

Is there a way to get the checksum of the /layout downoload? I verified the checksums of all the ISO's I downloaded prior to downloading with /layout and they all checked correctly. All downloads have given the same errors, so it seems to be someting other than a failed download.

After I run vsHub_Core.msi directly, I re-run the VS installer and it continues past that point, but then it fails again with the same error on the Build_Tools.msi file. When I run Build_Tools.msi directly, it tells me I need to run Build_Tools.msi from a setup program. I can not get past that point.

If I disconnect my machine from our local network, then the installer gives a warning that it is missing security certificates and may not install correctly. Could this be a security certificate problem? Is there information regarding which certificates are requried for installation?

Thanks for the continued support!

Jon

_{Tuesday, July 26, 2016 8:56 AM}

Dear Jon,

Refer to the missing security certificates information when you met, I found this issue may be related to the security certificate updates that are required to install some Visual Studio components cannot be applied to this computer, please have a look at this: https://support.microsoft.com/en-sg/kb/3039361#bookmark-root

Please try the following methods:

Method 1: Make sure that you are on a computer that is connected to the Internet. In some cases, Visual Studio can programmatically retrieve and apply the required certificate updates so that the affected features can be successfully installed.

Method 2: Check the Group Policy setting on your computer that controls automatic certificate updates. To check the setting, open the Group Policy Editor (gpedit.msc). From the Local Group Policy Editor, under Computer Configuration, expand Administrative Templates, expand Internet Communication Management, and then click Internet Communication settings. The setting that controls automatic certificate updates is Turn off Automatic Root Certificates Update. For Visual Studio to automatically retrieve and apply the required certificates, this option should be set to Disabled.

Note We recommend that you contact your system administrator before you change any Group Policy setting.

Method 3: If Methods 1 and 2 do not resolve the issue, you can also try to manually install the required certificate updates. For information about how to obtain Windows update root certificates, see How to get a Root Certificate update for Windows.

Best regards,

Sara

_{Thursday, July 28, 2016 9:36 AM}

Hi Jon,

I'm so glad to hear that your issue is solved and thank you for your sharing.

Best regards,

Sara

_{Friday, November 11, 2016 2:42 PM}

Dear Sara,

I am having the similar issue when installing Visual Studio.NET 2015 Developer, I've uploaded the needed log as per instruction in your post, here is the link: https://1drv.ms/u/s!AiWQFycQzsoJgXrM-GGmPgT8RYkv.

It would be appreciated if you can take a look and advise the procedure to fix it.

Thank you very much.

_{Monday, November 14, 2016 8:03 AM}

Hi mdivk,

Welcome to the MSDN forum.

Since this thread is ended up for several months, could you please create a new thread for your issue and it will also convenient for us to trace and research your issue, thank you for your understanding.

Best regards,

Sara

MSDN Community Support
Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact [email protected].

Share via

Failed authenticode verification during Visual Studio 2015 Enterprise install

Question

All replies (11)

Additional resources