Article number
000003431
Affected Versions
All
Source Hypervisor
All
Target Hypervisor
All

ZVM Installation/Upgrade Fails Due to Invalid Digital Signature

Viewed 81 times

Root Cause

This indicates that Windows does not recognize DigiCert as an authorized Certificate Authority.

Symptoms

A ZVM installation or upgrade fails with the following error:

Package: Zerto Virtual Replication Error: A file that is required cannot be installed because the cabinet file C:ProgramDataPackage Cache{<UUID>}v<version>cab1.cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.

Solution

To verify that this issue is present, check the following in the ZVM installer file:
  1. Right click on the ZVM installer file
  2. Select Properties
  3. Select the Digital Signatures tab
  4. Select the signature in the box below and click the Details button
  5. In the opened pane, review the Digital Signature Information, and check for the following: ​​"The certificate in the signature cannot be verified"

To resolve this issue, download the following certificate files from the DigiCert site:
  1. Download and install the following root CA.
"GlobalSign Root CA - R1"
https://www.globalsign.com/en/support/root-certificate/osroot.php

Once downloaded, install it on the affected server to the Trusted Root Certification Authorities Store.

2. Right click on the ZVM installer file
3. Select Properties
4. Select the Digital Signatures tab
5. Select the signature in the box below and click the Details button. The 'countersignature is not valid' message should no longer be present.
6. Start the upgrade which should complete without issue.