Article number
000003327
Affected Versions
All
Source Hypervisor
All
Target Hypervisor
All

Error: “Cabinet File Has Invalid Signature” During ZVR Installation or Upgrade

Viewed 501 times

Summary

This article describes a scenario in which an installation or upgrade fails with error about an invalid digital signature.

Root Cause

This "Invalid digital signature" issue is usually related to Windows not recognizing the root certificate as an authorized Certificate Authority or it has expired.

NOTE: Zerto installer certification authority changed to GoDaddy on July 1st, 2020. The installation requires the certification to be installed on the VM. In rare scenarios in Zerto v8.0U3 and above (To include latest installers of previous version), where Windows did not run a Windows update, or due to strict certification policy that does not allow GoDaddy certification to be installed, users will get an installation error, and will be required to manually install the GoDaddy root certificate.

Symptoms

After attempting an installation or upgrade of the ZVR product on the ZVM machine, the below dialog may be seen:


Additionally, in the logs or Windows Event Viewer, you may also see an error similar to the following:

Product: Zerto Virtual Replication -- Error 1330. A file that is required cannot be installed because the cabinet file C:\ProgramData\Package Cache\{258FFCE3-5000-4C80-BEEE-8DE50F79C1AD}v8.0.10.223\cab1.cab has an invalid digital signature.  This may indicate that the cabinet file is corrupt.  

Solution

Connect ZVM VM to run Windows Updates or proceed with work around below:

1. Install "GoDaddy Class 2 Certification Authority Root Certificate - G2" from the below locations:


https://certs.godaddy.com/repository

NOTE: The Go Daddy Root Cert Authority is countersigned by the GlobalSign Root Cert, so please ensure the GlobalSign Root cert is also installed:

https://support.globalsign.com/ca-certificates/root-certificates/globalsign-root-certificates


GlobalSign Root R1
https://secure.globalsign.net/cacert/Root-R1.crt

image.png

2. The Digital Signature Details for the Installer file should show: "This digital signature is OK."

image.png

3. Attempt the installation once more.