Video Screencast Help
Archiving and eDiscovery Community Blog

Enterprise Vault FSA Agent 9.0.3 and later: Installation may fail with a signature verification error

Created: 01 Dec 2011 • Updated: 29 May 2014 • 5 comments
StephenConnolly's picture
+1 1 Vote
Login to vote

In September 2011 Enterprise Vault adopted a new Digital Certificate for signing files. This certificate's root certificate is Verisign Class 3 Public Primary Certification Authority G5. Most systems that have an internet connection will get this certificate via an automatic update, but if that doesn't happen then you will get an error like this in the installation log when you attempt to install the FSA agent on that system:

DIFXAPP: ERROR: Signature verification
failed while checking integrity of driver package 'evmf.inf'
('C:\EV_Install\drivers\evmf.inf').

If you check the MSI package's digital signature on the target file server, you will see that the root certificate cannot be found on the local system.

To address the problem you will need to install the new root certificate on the file server. For more details about how to obtain the certificate, see the following Microsoft KB article: http://support.microsoft.com/kb/931125.

Comments 5 CommentsJump to latest comment

StephenConnolly's picture

Just discovered that the root certificate used by the timestamp server may also expire over time. If you update the root certificate you may still have an issue with the signature of the timestamp. To address this you can install the following certificate to the root certification authorities node on the target file server

http://www.geotrust.com/resources/root_certificate...

Stephen Connolly | Configuration Manager| Cofunds Ltd | LinkedIn

+1
Login to vote
StephenConnolly's picture

Here's the rationale:
https://knowledge.verisign.com/support/code-signin...

Stephen Connolly | Configuration Manager| Cofunds Ltd | LinkedIn

+1
Login to vote
John Santana's picture

So how to get the certificate and install it into the file server ?

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

-3
Login to vote
StephenConnolly's picture

See my link in the original post. Windows Update should normally take care of updating the roots for you.

Stephen Connolly | Configuration Manager| Cofunds Ltd | LinkedIn

+1
Login to vote
John Santana's picture

Cool, thanks Stephen !

Kind regards,

John Santana
IT Professional

--------------------------------------------------

Please be nice to me as I'm newbie in this forum.

+2
Login to vote