Re: Still cannot install 831464 hot fix..

From: neo [mvp outlook] (neo_at_online.mvps.org)
Date: 01/31/05


Date: Mon, 31 Jan 2005 15:19:46 -0800

Check the local computer certificate store to see if the Trusted Root
Certificates have been deleted or corrupted. The steps would be...

1) Logon to the server with local administrator privileges
2) Select Start | Run
3) Type: MMC
4) OK button
5) Select File | Add/Remove Snap-in
6) Select Add button
7) Pick Certificates
8) Select Computer Account > Next
9) Select Local Computer > Finish
10) Select Close/OK to return to console window
11) Expand Trusted Root Certificate Authorities
12) Select Certificates folder
13) Do the following "Issued To" certificates exist?

* Copyright(c) 1997 Microsoft Corp., Expire: 12-30-1999 Purpose: Time
stamping
* Microsoft Authenticode(tm) Root Authority, Expire: 12-31-1999 Purpose:
Secure Email, Code Signing
* Microsoft Root Authority, Expire: 12-31-2020 Purpose: ALL
* NO LIABILITY ACCEPTED, (c) 97 Verisign Inc., Expire: 1-7-2004 Purpose:
Time Stamping
* Verisign Commercial Software Publishers CA, Expire: 1-7-2004 Purpose:
Secure Email, Code Signing
* Thawte Timestamping CA, Expire: 12-31-2020 Purpose: Time Stamping

These are the magic 6 certificates that make the PKI technology work for
Microsoft Windows. Since you are missing the rest, the server will not be
able to verify websites using the HTTPS protocol (missing verisign, thawte,
.etc) or other services that require encryption/decryption.

/neo

ps - if you get to step 12 and there is no certificate store, it means the
entire certificate store has been deleted/wiped. Only way I know how to
reload is to acquire the certificates from another machine and load them
manually.

"Ron_b" <Ronb@discussions.microsoft.com> wrote in message
news:385012AB-7BC2-4413-8AB3-43C9F1A1198F@microsoft.com...
>I have posted several messages about this and nobody seems to want to work
> with this one. It must be a bad problem. I have tried to install hot fix
> 831464 on my sbs server 2003, it gives me the error:
> Setup could not verify data integrity of update.inf, make sure that
> cryptographic service is running on this machine.
> Can anyone help me with this...?