General XMetaL Discussion
Derek Read March 10, 2016 at 1:28 am
Internet Explorer certificate/signature error messageMarch 10, 2016 at 1:28 amParticipants 1Replies 0Last Activity 4 years, 10 months ago
All version 11 XMetaL products
Effective January 1, 2016, Microsoft has mandated that software vendors digitally sign their products using the SHA256 algorithm. All XMetaL 11.0 and newer products are signed using this mandated SHA256 algorithm.
Internet Explorer Error Message:
Windows itself performs a signature check on an installer when you run it. When you use Internet Explorer to download software it runs a separate (and apparently different) signature check. Some versions of Internet Explorer have a bug or limitation that does not allow them to properly recognize the new Microsoft mandated SHA256 algorithm used for signing. They will display an error message similar to “The signature of this program is corrupt or invalid” even in cases where the signature is OK.
The issue may be related to what Microsoft describes here or it may be a new issue (only Microsoft can say for sure): https://connect.microsoft.com/IE/feedback/details/800433/kb2870699-breaks-ie-msi-signature-validation
We are not aware of any other browsers that attempt to perform a separate signature check when downloading applications. It is just Internet Explorer that appears to try to do this.
1. Uninstall Microsoft Windows update KB2870699 before downloading the software.
2. Use a different browser (FireFox, Chrome, Opera, Safari, etc) to download the software.
3. Ignore the error and trust Windows to properly validate the signature. Please refer to the image attached to this posting.
In all cases, Windows itself should still check an installer when it runs and should tell you if the installer is corrupt or if the signature is otherwise invalid or not trusted.
- The topic ‘Internet Explorer certificate/signature error message’ is closed to new replies.