Article number
Affected Versions
Source Hypervisor
Target Hypervisor

ZVM Installation/Upgrade Fails Due to Invalid Digital Signature

Viewed 440 times


An administrator may find a ZVM Install or Upgrade fails for an invalid digital signature error.

Root Cause

This indicates that Windows does not recognize DigiCert as an authorized Certificate Authority.


A ZVM installation or upgrade fails with the following error:

Package: Zerto Virtual Replication Error: A file that is required cannot be installed because the cabinet file C:\ProgramData\Package Cache\{<UUID>}v<version>\ has an invalid digital signature. This may indicate that the cabinet file is corrupt.


To verify that this issue is present, check the following in the ZVM installer file:

  1. Right click on the ZVM installer file

  2. Select Properties

  3. Select the Digital Signatures tab

  4. Select the signature in the box below and click the Details button

  5. In the opened pane, review the Digital Signature Information, and check for the following: ​​"The certificate in the signature cannot be verified"

To resolve this issue, download the following certificate files from the DigiCert site:

  1. Download and install the following root CA.

"GlobalSign Root CA - R1"
Once downloaded, install it on the affected server to the Trusted Root Certification Authorities Store.

2. Right click on the ZVM installer file
3. Select Properties
4. Select the Digital Signatures tab
5. Select the signature in the box below and click the Details button. The 'countersignature is not valid' message should no longer be present.
6. Start the upgrade which should complete without issue.