General XMetaL Discussion

XMetaL Community Forum General XMetaL Discussion Internet Explorer certificate/signature error message

  • Derek Read

    Internet Explorer certificate/signature error message

    Participants 1
    Replies 0
    Last Activity 6 years, 9 months ago

    All version 11 XMetaL products

    Effective January 1, 2016, Microsoft has mandated that software vendors digitally sign their products using the SHA256 algorithm. All XMetaL 11.0 and newer products are signed using this mandated SHA256 algorithm.

    Internet Explorer Error Message:
    Windows itself performs a signature check on an installer when you run it. When you use Internet Explorer to download software it runs a separate (and apparently different) signature check. Some versions of Internet Explorer have a bug or limitation that does not allow them to properly recognize the new Microsoft mandated SHA256 algorithm used for signing. They will display an error message similar to “The signature of this program is corrupt or invalid” even in cases where the signature is OK.

    The issue may be related to what Microsoft describes here or it may be a new issue (only Microsoft can say for sure):

    Other Browsers
    We are not aware of any other browsers that attempt to perform a separate signature check when downloading applications. It is just Internet Explorer that appears to try to do this.

    1. Uninstall Microsoft Windows update KB2870699 before downloading the software.
    2. Use a different browser (FireFox, Chrome, Opera, Safari, etc) to download the software.
    3. Ignore the error and trust Windows to properly validate the signature. Please refer to the image attached to this posting.

    In all cases, Windows itself should still check an installer when it runs and should tell you if the installer is corrupt or if the signature is otherwise invalid or not trusted.


  • The topic ‘Internet Explorer certificate/signature error message’ is closed to new replies.