none
.NET Framework 4 Installation error - Generic Trust Failure

    Question

  • I tried to install .NET Framework 4 on Windows Server 2003, but got this error message "Generic trust failure".

    Part of the log:

    Action: Downloading and/or Verifying Items

    C:\e005b9f00558a52d0c\Windows6.0-KB956250-v6001-x86.msu: Verifying signature for Windows6.0-KB956250-v6001-x86.msu

    C:\e005b9f00558a52d0c\Windows6.0-KB956250-v6001-x86.msu Signature verified successfully for Windows6.0-KB956250-v6001-x86.msu

    C:\e005b9f00558a52d0c\Windows6.1-KB958488-v6001-x86.msu: Verifying signature for Windows6.1-KB958488-v6001-x86.msu

    C:\e005b9f00558a52d0c\Windows6.1-KB958488-v6001-x86.msu Signature verified successfully for Windows6.1-KB958488-v6001-x86.msu

    C:\e005b9f00558a52d0c\netfx_Core.mzz: Verifying signature for netfx_Core.mzz

    C:\e005b9f00558a52d0c\netfx_Core.mzz Signature verified successfully for netfx_Core.mzz

    C:\e005b9f00558a52d0c\netfx_Core_x86.msi: Verifying signature for netfx_Core_x86.msi

    Possible transient lock. WinVerifyTrust failed with error: 2148204800

    Possible transient lock. WinVerifyTrust failed with error: 2148204800

    C:\e005b9f00558a52d0c\netfx_Core_x86.msi - Signature verification for file netfx_Core_x86.msi (C:\e005b9f00558a52d0c\netfx_Core_x86.msi) failed with error 0x800b0100 (No signature was present in the subject.)

    C:\e005b9f00558a52d0c\netfx_Core_x86.msi Signature could not be verified for netfx_Core_x86.msi

    No FileHash provided. Cannot perform FileHash verification for netfx_Core_x86.msi

    File netfx_Core_x86.msi (C:\e005b9f00558a52d0c\netfx_Core_x86.msi), failed authentication. (Error = -2146762496). It is recommended that you delete this file and retry setup again.

    Failed to verify and authenticate the file -C:\e005b9f00558a52d0c\netfx_Core_x86.msi

    Please delete the file, C:\e005b9f00558a52d0c\netfx_Core_x86.msi and run the package again

    Action complete

    Action: Performing actions on all Items

    Action: ServiceControl - Stop clr_optimization_v2.0.50727_32

    ServiceControl operation succeeded!

    Action complete

    Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure. " (Elapsed time: 0 00:00:26).

     

    Please. help to solve problem!!

     

    Friday, April 16, 2010 3:21 PM

All replies

  • Could you collect your .Netfx4 setup logs following the instructions at http://blogs.msdn.com/heaths/pages/collect.aspx and post them somewhere we can access? (you can use skydrive.live.com to post the logs). 

    How did you run the setup? I mean, did you run the redist directly or extract it somewhere and then run setup.exe?

    There are two possible causes for this failure:

    1. An aniti-virus application running on the system has locked the file for virus scan.  OR
    2. the file has been corrupted during or after the extraction.

    I think, it is a good idea to retry few times to see if it works or not.

    Regards,
    Muhammad Ghaznawi

    Friday, April 16, 2010 6:51 PM
  • Hi!

    I tried a lot of time! And I tried to install it on 3 computers with Windows Server 2003! Earlier I tried to install .NET 4 RC, but there was this error.

    I run en_.net_framework_4_full_x86_x64_508940.exe which I've downloaded from MSDN.

    Soon I try to collect setup logs and post them.

    Friday, April 16, 2010 8:15 PM
  • Hello,

    Is your issue resolved? If not, could you please post the log or sent it to me (v-jinfan{at}microsoft.com) for better troubleshooting?

    In addition, I have came across similar issue which is resolved by installing with a local account with Administrator rights. You can have a try.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    Send us any feedback you have about the help from MSFT at fbmsdn@microsoft.com.
    Tuesday, April 20, 2010 8:59 AM
    Moderator
  • Hi, Edwer!

    No, this issue isn't resolved! I've already tried to install with Admins rights.

    This is logs: http://cid-77d9be1aef3c91f8.skydrive.live.com/self.aspx/.Public/kapaalog.cab

     

    Tuesday, April 20, 2010 11:17 AM
  • Hello,

    Based on the log, it seems the installtion file has been corrupted. You may download it from here(http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0a391abd-25c1-4fc0-919f-b21f31ab88b7) with download manager and install again to see if this issue still exists.


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    Send us any feedback you have about the help from MSFT at fbmsdn@microsoft.com.
    Wednesday, April 21, 2010 10:15 AM
    Moderator
  • Hi!

    I downloaded it and tried to install, but...same error - "Generic trust fuilure".

    I see in logs "Signature verification for file netfx_Core_x86.msi (C:\1b155233d231da4c70db4ef4\netfx_Core_x86.msi) failed with error 0x800b0100 (No signature was present in the subject.)", but don't know, what is cause of it....

    Wednesday, April 21, 2010 11:30 AM
  • It is apparent from the log files that some application (i suspect an anti-virus) on the machine is locking the MSI file as soon as it gets laid down on target machine for installation. That cause the signature verification failed. here is what log specified:

    =====================

    [4/19/2010, 12:8:51] Action: Downloading http://go.microsoft.com/fwlink/?LinkId=164177&clcid=0x409 using UrlMon ...

    [4/19/2010, 12:8:52] Action complete
    [4/19/2010, 12:8:52] C:\DOCUME~1\kapa\LOCALS~1\Temp\1\Microsoft .NET Framework 4 Setup_4.0.30319\TMP36.tmp: Verifying signature for netfx_Core_x86.msi...

    [4/19/2010, 12:8:52]Possible transient lock. WinVerifyTrust failed with error: 2148204800
    [4/19/2010, 12:8:52]Possible transient lock. WinVerifyTrust failed with error: 2148204800

     ====================

    I would recommend that you:

    1.     Download the full stand alone setup package from here: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0a391abd-25c1-4fc0-919f-b21f31ab88b7

    2.     Open a command line and extract the package to a local folder using the command: dotNetFx40_Full_x86_x64.exe /x

    3.     To make sure that the netfx_Core_x86.msi is digitally signed, open the folder (in windows explorer) where you extracted the package, right click on netfx_Core_x86.msi file and select ‘Properties’. You should see a “Digital Signature” tab showing that the file has been signed by Microsoft Corporation.

    4.     Now wait for a while so that the Anti-virus scans all extracted files. Alternatively, you can force anti-virus to scan the folder where you extracted the package; so that it doesn't lock these files anymore. See you anti-virus help to find out how to do it.

    5.     Now, using elevated command prompt, go to the folder where you extracted the package and issue this command: Setup.exe /x86 /x64

    This should work. Please let me know if it solves the problem or not.

    Regards,
    Muhammad Ghaznawi

     

    Wednesday, April 21, 2010 6:55 PM
  • Hello,

     

    We had the very same issue trying to install .NET 4.0 on Windows Server 2003.

    After some investigation it appeared that an old Windows Powershell installation somehow caused signature verification failure on MSI files.

    After reinstalling Windows Powershell to the latest version the problem disappeared.

     

    Good luck!

     

    Monday, May 31, 2010 7:33 PM
  • Problem persists on windows 7 x64 bit even after doing all the things suggested in this thread:

    OS Version = 6.1.7600, Platform 2
    OS Description = Windows 7 - x64 Ultimate Edition 
    CommandLine = D:\d4c4fc031e474dc19a068d22a7\\Setup.exe /x86 /x64
    TimeZone = Jerusalem Daylight Time
    Initial LCID = 1033
    Using Simultaneous Download and Install mechanism
    Operation: Installing
    Package Name = Microsoft .NET Framework 4 Setup
    Package Version = 4.0.30319
    User Experience Data Collection Policy: AlwaysUploaded
    Number of applicable items: 11
    D:\d4c4fc031e474dc19a068d22a7\SetupUtility.exe - Signature verification for file SetupUtility.exe (D:\d4c4fc031e474dc19a068d22a7\SetupUtility.exe) failed with error 0x800b0001 (Unknown trust provider.)
    No FileHash provided. Cannot perform FileHash verification for SetupUtility.exe
    File SetupUtility.exe (D:\d4c4fc031e474dc19a068d22a7\SetupUtility.exe), failed authentication. (Error = -2146762751). It is recommended that you delete this file and retry setup again.
    Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure. " (Elapsed time: 0 00:00:04).

    Saturday, July 17, 2010 11:47 AM
  • Hello,

    This looks like the issue of incorrect dll registration for some security dlls. Can you please try the following and let me know if this solves the issue or not?

    Method for Windows 2000, Windows XP, or Windows Server 2003

    To resolve this issue, register the Softpub.dll, Wintrust.dll, Initpki.dll, and Mssip32.dll files. To register these files, follow these steps:

    1. Click Start, click Run, type cmd, and then click OK.
    2. At the command prompt, type regsvr32 Softpub.dll /s, and then press ENTER.
    3. At the command prompt, type regsvr32 Wintrust.dll /s, and then press ENTER.
    4. At the command prompt, type regsvr32 Initpki.dll /s, and then press ENTER.
    5. At the command prompt, type regsvr32 Mssip32.dll /s, and then press ENTER.

    The complete artcle can been seen here: http://support.microsoft.com/kb/956702

    I hope this will resolve the issue.

    Thanks & Regards,
    Muhammad Ghaznawi

    • Proposed as answer by HellBringer Tuesday, April 05, 2011 9:25 AM
    Wednesday, August 11, 2010 11:45 PM
  • It seems that the generic trust failure has something to do with windows authentication utility. After replacing the windows media DVD to a new one, and reinstalling windows 7 the problem went away.
    Tuesday, September 14, 2010 8:04 AM
  • Thank you, Muhammad.

    At least for me, it worked.

     

    Miguel Serrano

    Tuesday, September 21, 2010 10:11 AM
  • I faced a similar problem with uninstalling .NET 4 on Windows Server 2003 Standard. I needed to uninstall it as Office Communications Server was having a problem during its install. When I went to uninstall the .NET 4 Client Profile, I received the same error, "Generic Trust Failue". I tried resolving it by downloading the full package, updating my root certs, and registering dlls as listed in this post, but it still would not uninstall. I finally was able to resolve by either one or both of these options. I can't say which one worked as I only tried the unuinstall after doing both.

    1) Repairing the installation.

    -Find the GUID for the .NET 4 Client profile (Search under HKLM\Spftware\Microsoft\Windows\CurrentVersion\Uninstall for .NET 4)

    -In a command window type msiexec /fa {GUID} /quiet

    -Reboot

    2) Install Silverlight from Windows Update

    - I didn't have a need to install Silverlight on my server, but the only reason I chose to try this was that I read on another forum that someone else was having a .NET issue related to Silverlight.

    After I did these, I was able to uninstall it without getting the error. You may want to just try installing Silverlight and see if that helps.

     

    Monday, November 08, 2010 8:55 PM
  • I went to my profiles appdata\local\temp folder and deleted the 'Microsoft .Net Framework 4 Setup' directory, redownloaded the install file, and it installed.
    Saturday, January 01, 2011 5:28 AM
  • I've tried all of this, plus some stuff using subinacl.exe, and FixIt 50202.

    Nothing has worked! :(

    Tuesday, February 01, 2011 12:53 PM
  • make a video man
    Wednesday, February 09, 2011 10:07 AM
  • I was getting the same error on attempting to install either the .Net 4 client profile or the entire .Net Framework.  FYI, my machine is Windows 7 x64. 

    After a lot of Google searches and examination of log files, I came to suspect that it was the result of a problem with the certificates on my machine. Specifically, "Trusted Root Certification Authorities".

    Here was my fix: http://www.microsoft.com/downloads/en/details.aspx?FamilyID=25249786-2B8E-4C51-8F4B-727CE25CC2C5

    I ran the program to update the certificates and was then able to install .Net 4.0.

    Hope this helps somebody.

     

     

    • Proposed as answer by S7i0r Thursday, March 24, 2011 5:20 PM
    • Unproposed as answer by S7i0r Thursday, March 24, 2011 5:21 PM
    • Proposed as answer by None01 Wednesday, April 20, 2011 2:52 PM
    Saturday, March 12, 2011 8:36 PM
  • Yes, that's work fine for me too. Thank's.

    Wednesday, March 16, 2011 5:20 PM
  • I have been having the same issue with .net 4 and visual c++ 2010.

    I fixed it by extracting the files. view the properties of the file that fails the trust. view the details of the digital cert and install it as a trusted root.

    Both apps then installed without errors.

     

     

    Wednesday, March 16, 2011 9:17 PM
  • The install of the rootsupd.exe worked for me too on Win7 Enterprise x86!

    Thank You very much jwmerrick for the provided solution!

    Thursday, March 24, 2011 5:20 PM
  • JWmerrick-You're the Man.  You solve my problem with the Generic Trust Failure. Thank for you assistance. I been try two day to troubleshoot this problem.

     

    Friday, April 15, 2011 3:05 AM
  • Hi Muhammad,

    I am having the same problem installing .NET 4, I followed these steps, but when I get to

    3.     To make sure that the netfx_Core_x86.msi is digitally signed, open the folder (in windows explorer) where you extracted the package, right click on netfx_Core_x86.msi file and select ‘Properties’. You should see a “Digital Signature” tab showing that the file has been signed by Microsoft Corporation.

     

    I *cannot* see a "Digital Signature" tab showing that the file has been signed by Microsoft.

     

    Would appreciate any advice you can give me.

     

    Regards.

    Saturday, April 16, 2011 2:15 PM
  • Thank You very much jwmerrick! It works for me too on my windows 7 x64 machine.
    Thursday, May 12, 2011 9:03 AM
  • Thank you! Thank you! Thank you!

    I have been trying for weeks to resolve this and nothing worked except the fix suggested by jwmerrick:

     http://www.microsoft.com/downloads/en/details.aspx?FamilyID=25249786-2B8E-4C51-8F4B-727CE25CC2C5

    Tuesday, July 05, 2011 3:03 AM
  • I've been trying to install .Net Framework 4 so that I can run a video editing software. I keep getting the Generic Trust Failure notification and it wont install. I've tried multiple suggestions I've gotten from the internet, yet nothing is working. I've attached the log.

     

     

    OS Version = 6.1.7601, Platform 2, Service Pack 1
    OS Description = Windows 7 - x64 Home Premium Edition Service Pack 1
    CommandLine = C:\afb361b894b149295245c5aba9265a21\\Setup.exe /x86 /x64 /ia64 /web
    TimeZone = Eastern Daylight Time
    Initial LCID = 1033
    Using Simultaneous Download and Install mechanism
     
     
     
    Operation: Installing
    Package Name = Microsoft .NET Framework 4 Setup
    Package Version = 4.0.30319
    User Experience Data Collection Policy: AlwaysUploaded
       
     
      
     
       
      
    Number of applicable items: 11
    C:\afb361b894b149295245c5aba9265a21\SetupUtility.exe - Signature verification for file SetupUtility.exe (C:\afb361b894b149295245c5aba9265a21\SetupUtility.exe) failed with error 0x800b010a (A certificate chain could not be built to a trusted root authority.)
    No FileHash provided. Cannot perform FileHash verification for SetupUtility.exe
    File SetupUtility.exe (C:\afb361b894b149295245c5aba9265a21\SetupUtility.exe), failed authentication. (Error = -2146762486). It is recommended that you delete this file and retry setup again.
    Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure. " (Elapsed time: 0 00:00:06).
    Saturday, August 06, 2011 3:38 PM
  • I still got the same Problem. I can check the extractet files for certificates and there are certificates. BUT these cannot be verified by the computer.

    I do have installed the rootsupd.exe (October 2010)

    I have the standalone installer. Does it connect to microsoft to verify the certificates? Could this be a network issue?

    Thursday, August 18, 2011 3:52 PM
  • Thanks Jwmerrick.  you are the best.  I tried all suggestion from others, only yours solved the problem on my Win7 64bit.  Thanks.
    PLOW
    Wednesday, September 14, 2011 7:14 AM
  • Hello,

    We have the same kind of problems with .NET 4 installation and it looks like it has something to do with our new image and or our new firewall. We are Installing the .NET 4 with SCCM installation task sequance and it fails with this error. We have debugged the problem for wa week now but there are no information at the firewall logs that the installation would fail on network problems (every connection is passed nothing is blocked during the installation). Installation is able to go and check the certificates from Microsofts servers. Also in our Installation .NET is installed before any other programs after the Installation of Windows 7 Enterprise x86 SP1 included. I have tied the online / offline installers but they both fail with the same error. I tried the root certification fix. And every other possible solution found on google / technet etc. But I can't find where the problem is. How ever if i take the machine and connect it to outside WAN without proxy / FW and all that the offline installer works and installs the .Net 4 and client setup packages but the online installer still fails with the same error message. damn... :(

     

    //LOMM^TV

    Monday, September 19, 2011 7:06 AM
  • As usual, on XP SP3

    Possible transient lock. WinVerifyTrust failed with error: 2148204800
    Possible transient lock. WinVerifyTrust failed with error: 2148204800
    C:\Downloads\Software\dotNetFx40_Full_x86_x64\netfx_Core_x86.msi - Signature verification for file netfx_Core_x86.msi (C:\Downloads\Software\dotNetFx40_Full_x86_x64\netfx_Core_x86.msi) failed with error 0x800b0100
    C:\Downloads\Software\dotNetFx40_Full_x86_x64\netfx_Core_x86.msi Signature could not be verified for netfx_Core_x86.msi
    No FileHash provided. Cannot perform FileHash verification for netfx_Core_x86.msi
    File netfx_Core_x86.msi (C:\Downloads\Software\dotNetFx40_Full_x86_x64\netfx_Core_x86.msi), failed authentication. (Error = -2146762496). It is recommended that you delete this file and retry setup again.
    Failed to verify and authenticate the file -C:\Downloads\Software\dotNetFx40_Full...\netfx_Core_x86.msi
    Please delete the file, C:\Downloads\Software\dotNetFx40_Full...\netfx_Core_x86.msi and run the package again

    Monday, September 19, 2011 9:21 AM
  • Ok it get weirder...I just noted that If I Don't unpack the offline installation and use only the "dotNetFx40_Full_x86_x64.exe", right click and "Run as admin..." the package shows it signed by "unknown publisher".

    AND

    Right click the package and go to "properties" --> Digital Signitures -->  click the certificate details THEN I didn't even save the certificate or anything I just press "OK". and close all the Windows. After this the package shows it signed by Microsoft and the installation goes fine... BUT if I unpack the "dotNetFx40_Full_x86_x64.exe" and run the setup.exe it doesn't run... and still fails on the same errorcode. So I did some more study and as it really looks like there is something wrong with the certfication revocation.... but no luck :P There is other article about this sort of thing but It didn't help us:

    http://social.msdn.microsoft.com/Forums/en/netfxsetup/thread/6a08414c-8b96-46bb-a162-8282efc3089a


    • Edited by LomM Tuesday, September 20, 2011 6:15 AM
    Tuesday, September 20, 2011 6:14 AM
  • Hello,

     

    http://social.msdn.microsoft.com/Forums/en/netfxsetup/thread/6a08414c-8b96-46bb-a162-8282efc3089a

     

    This thread was the answer to our problem after all. We had had an old (and now deleted) GP that had implemented a change to this registry key:

     

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing]
    "State"=dword:000002c9
    

     


    This is the as you would go to your control panel --> internet options --> advanced TAB --> Security section and clicked the "Check for publisher's certificate revocation". I tryed it on both "ON" and "OFF" but that didn't help only after I deleted the reg key altogether before I installed "dotNetFx40_Full_x86_x64.exe" the installation didn't fail.

     

    User Configuration (Enabled) - GP Sample that we had used:

    The hotfix that the article talked about didn't help us because I think it's already implemented in SP1 (because after Installing our normal Image that is Windows 7 Enterprise x86 with SP1 and no other windows update it gives and error that the fix is already installed on this machine) but the error still remains. If you have to Install dotNET 4 on your SCCM task sequance or similar and get this error you can use this script (if your GP is making changes on this value). The GP will return the values after next restart.

     

    ::Sets the script path to this folder as long as the "install.bat" and "dotNetFx40_Full_x86_x64.exe" are in the same folder this script will run normal
    set cdpath=%~dp0
    ::Deletes ALL VALUES on current users "HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing" - if you are using SCCM on this installtion this account is the SYSTEM account
    REG DELETE "HKCU\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing" /va /f
    ::After this runs the .Net 4 Installation runs
    "%cdpath%dotNetFx40_Full_x86_x64.exe" /q /norestart
    

     

    So it looks like there are multiple reasons that can couse this kind of error and not all of them are connected to .NET 4 directly. DotNET4 Installation just checks so many certficates and authorites that the installation package shows other problems that might be on your enviroment. Thanks to all how have contributed information to fix our problem I hope this helps someone how has this error.

     


    • Edited by LomM Wednesday, September 21, 2011 10:39 AM
    • Proposed as answer by mikinov Wednesday, October 26, 2011 7:34 PM
    Wednesday, September 21, 2011 10:39 AM
  • I am having the same problem as others.  I can't install .NET 4.  I am attaching my log files for the Collect.exe tool, can someone help me understand why this is failing?  It almost seems like its certificate related, but I have tried everything I can think of.  Here is some info:

     I cannot get .NET 4 Framework to install on my Windows 2003 Server. Here is the info: I had trouble installing windows updates. I would constantly get an error from windows update that indicated there was a a problem with the security credentials: The error I got was

    0x8007f0da

    I followed all of the tasks identified to fix this at:http://support.microsoft.com/kb/958050 they did not resolve the issue. So I went on to the "Advanced Troubleshooting" specified in the article at this location:http://support.microsoft.com/kb/822798 I tried everyone of these steps, with no avail. One of the updates that it could not install was .NET 4, so I was also investigating that issue. In the process I ran .Net Cleanup Tool:http://blogs.msdn.com/b/astebner/archive/2006/05/30/611355.aspx After doing this I tried to re-install .NET 1.1, 1.1sp1, 3.5 and 2.0, but was only able to reinstall 3.5, as 1.1 and 2.0 were part of the Windows 2003 operating system. After installing .NET 3.5 Windows Update installed numerous 3.5 updates/fixes. I ran .NET Framework Setup Verification Tool and it showed all of my .NET's installed were fine, except 1.1.http://blogs.msdn.com/b/astebner/archive/2008/10/13/8999004.aspx So then I proceeded to manually fix my 1.1 install by following these instructions:http://blogs.msdn.com/b/astebner/archive/2005/06/21/431385.aspx After following these instructions, and re-running the .NET Framework Setup Verification Tool, it shows all my .NET's in good:

    .NET Framework 1.1 SP1

    .NET Framework 2.0 SP2

    .NET Framework 3.0 SP2

    .NET Framework 3.5 SP1

    I then manually download dotNetFx40_Full_x86_x64.exe and try to install it and it fails. The error I get is: [9/16/2011, 14:27:8]Failed to verify and authenticate the file -C:\c7290308adb3cdc4f3c4424c046838cc\netfx_Core_x86.msi [9/16/2011, 14:27:8]Please delete the file, C:\c7290308adb3cdc4f3c4424c046838cc\netfx_Core_x86.msi and run the package again I follow the instructions here to extract the file and verify the certificate: [9/16/2011, 14:27:9]Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure. " (Elapsed time: 0 00:00:05). So I went to the original dotNetFx40_Full_x86_x64.exe file, Right Click, Properties, Digital Signature, saw it was valid, did View Certificate, and Installed the Certificate for good measure. Still same error. I removed the file C:\c7290308adb3cdc4f3c4424c046838cc\netfx_Core_x86.msi as it told me to. I did not see where I could "disable .NET" and then re-enable it like you can in some other versions of Windows: (Start button –> Control Panel –> Programs –> Turn Windows Features on or off –> clear check box next to Microsoft .NET Framework). I cleaned %temp%, rebooted the box and then tried to install the standalone installer again, but get the same result. I am looking for ANY ideas that can help me with this as it's driving me nuts. If I look at the Certificate on dotNetFx40_Full_x86_x64.exe it shows Valid from 12/7/2009 to 3/72011, so it's expired. I thought that may be the issue, so I set my clock back to 1/1/2011 and retried the installation but it still fails.


    Here is a link to my log files:

    https://skydrive.live.com/redir.aspx?cid=f7c6571c07f5c3ae&resid=F7C6571C07F5C3AE!122

     

    Friday, September 23, 2011 7:30 PM
  • We are still getting this same error if I unpack the "dotNetFx40_Full_x86_x64.exe " and try to run the .msi files "by hand". Have you checked your firewall? Can you see hits from that computer IP you are trying to install? Is it trying to validate the certificate of the package to Windows cert servers? If you can't use that kind of filtering on your firewall you could run "wireshark" or other network sniffer while trying to install the packaga you may see that the installer is trying to get pass the fw but is stopped there. The weird part on this was that we could track the trafick to Microsofts server and it went pass our firewall ok BUT it still gave us that same error. Only when we wen't streight without using any proxy-servers  / fw we where able to get passed and the installation didn't fail.

    I'm not an expert on certificates or anything but the certificate that has been used to sign that "dotNetFx40_Full_x86_x64.exe" -"offline" installer is old and does this mean you have to have some sort of internet connection that it can check that the package is still valid?

    Sunday, September 25, 2011 1:22 PM
  • Fantastic
    Downloaded "dotNetFx40_Full_x86_x64.exe " in a PC with Vista.
    Extracted files with Winrar.
    Right click on "netfx_Core_x86.msi" and, surprise, there's a tab "Digital signature".
    Copied the files in a pendrive.
    Copied the files in a PC with XP SP3.
    Right click on "netfx_Core_x86.msi" and, surprise, there's not a tab "Digital signature".
    And, as usual, "Failed to verify and authenticate the file C:\Downloads\Software\dotNetFx40_Full...\netfx_Core_x86.msi"
    Tuesday, October 04, 2011 7:26 AM
  • I've been stuck with the "Generic Trust Failure" error since I first tried installing Dot Net 4 in March (I'm on Windows 7 x64).

    LomM BIG thank you for putting me on to registry key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing]
    The State value was set to 0x200 but I changed it to the default value of 0x23C00 and Dot Net 4 installed without a hitch.  Oh and <sarcastic> thanks to MS for NOT replying to my email back in March about this problem.  The installer is paranoid and lousy and this error message is real dumb.

    Monday, October 10, 2011 2:49 AM
  • I was having this problem"Failed to Verify and authenticate..." with NDB40-KB2656351 security update for .NET 4.  LomM's answer solved my problem.  I simply backed up the state registry key, then deleted it, and all is well, the update installed.

    I tried the previous suggestion of registering DLLs, which didn't work.  Prior to that I performed the suggested action of removing the offending file and trying again.  This is a domain computer, so I'm thinking that old GP affected us as well.

    • Proposed as answer by PowerPete22 Wednesday, February 20, 2013 10:08 AM
    Friday, January 13, 2012 4:07 PM
  • I received .net Framework 4.0 update last week and now I can't open any of my AutoDesk programs? 4.0 won't install, uninstall or repair? HELP!
    Saturday, January 14, 2012 10:30 PM
  • Your a genius.  I have tried a number of more complex solutions with no luck.  This did the trick!  Thanks
    Thursday, January 26, 2012 1:20 AM
  • It seems that the generic trust failure has something to do with windows authentication utility. After replacing the windows media DVD to a new one, and reinstalling windows 7 the problem went away.

    reputation managemant
    Friday, January 27, 2012 6:17 AM
  • We triggered the same problem with another root cause:

    http://social.technet.microsoft.com/Forums/en-US/winserverGP/thread/a2f5ae71-c4e8-4523-8817-dbc9161396a1/

    Thursday, March 08, 2012 12:10 PM
  • I had a Windows Server 2003 x32 - ya, in the year 2012...  and your directions worked for .net 4!  I was even having issues patching from Windows Update for .net 4... here's what I did in total - thank you all!

    1.     Download the full stand alone setup package from here: http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=0a391abd-25c1-4fc0-919f-b21f31ab88b7

    2.     Open a command line and extract the package to a local folder using the command: dotNetFx40_Full_x86_x64.exe /x

    3.     To make sure that the netfx_Core_x86.msi is digitally signed, open the folder (in windows explorer) where you extracted the package, right click on netfx_Core_x86.msi file and select ‘Properties’. You should see a “Digital Signature” tab showing that the file has been signed by Microsoft Corporation.

    4.     Now wait for a while so that the Anti-virus scans all extracted files. Alternatively, you can force anti-virus to scan the folder where you extracted the package; so that it doesn't lock these files anymore. See you anti-virus help to find out how to do it.

    5.     Now, using elevated command prompt, go to the folder where you extracted the package and issue this command: Setup.exe /x86 /x64

    Installed the Update for Root Certificates [March 2011] (KB931125)

    Finally ran this   

      Click Start, click Run, type cmd, and then click OK.
        At the command prompt, type regsvr32 Softpub.dll /s, and then press ENTER.
        At the command prompt, type regsvr32 Wintrust.dll /s, and then press ENTER.
        At the command prompt, type regsvr32 Initpki.dll /s, and then press ENTER.
        At the command prompt, type regsvr32 Mssip32.dll /s, and then press ENTER.

    Windows updates - working like a charm :)

    Tuesday, March 13, 2012 12:32 AM
  • I am having the same problems with .NET Framework 4.0 and a Generic trust failure. i have tried every single suggestion in this thread and still nothing. What else is there to do?

    Did the above and step 5 resulted in this:

    OS Version = 6.1.7601, Platform 2, Service Pack 1
    OS Description = Windows 7 - x64 Ultimate Edition Service Pack 1
    CommandLine = Setup.exe /x86 /x64
    TimeZone = Pacific Daylight Time
    Initial LCID = 1033
    Using Simultaneous Download and Install mechanism
    Operation: Installing
    Package Name = Microsoft .NET Framework 4 Setup
    Package Version = 4.0.30319
    User Experience Data Collection Policy: AlwaysUploaded
    Number of applicable items: 11
    D:\.NET\SetupUtility.exe - Signature verification for file SetupUtility.exe (D:\.NET\SetupUtility.exe) failed with error 0x800b0001 (Unknown trust provider.)
    No FileHash provided. Cannot perform FileHash verification for SetupUtility.exe
    File SetupUtility.exe (D:\.NET\SetupUtility.exe), failed authentication. (Error = -2146762751). It is recommended that you delete this file and retry setup again.
    Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure. " (Elapsed time: 0 00:00:11).
    Monday, April 23, 2012 2:07 AM
  • Try to login as Local Administrator and install. It solved my issue.
    Thursday, May 03, 2012 2:34 AM
  • This worked for me as well, along with turning off .NET 3.5, restart and turning it on again, plus disabling Norton 360 (both firewall and anti-virus) during the update. Thx for sharing.
    Friday, May 18, 2012 2:29 PM
  • WTG, Dmitry!  I worked on this all day and tried a lot of things including the Root Certificate Updater, .Net Cleanup (Global Uninstaller), and .Net Repair / fix.  

    But in the end, I found I had a crummy version of Power Shell on my XP x86 system preventing it from reading certificates properly.  Bam, uninstalled powershell, and then I could pass the .Net 4 cert test.  

    Thanks, Dmitry!

    Monday, July 16, 2012 3:55 AM
  • I almost decide to reinstall os, at last i found this post.

    Thanks Jwmerrick. Thank you verrrrrrrrrrrry much!  I love you!



    Beggars can't be choosers.

    • Proposed as answer by Ander Taylor Thursday, February 07, 2013 4:02 AM
    • Unproposed as answer by Ander Taylor Thursday, February 07, 2013 4:02 AM
    Monday, October 29, 2012 6:12 AM
  • Hi All,

    I have had no luck with any of the proposed answers : (

    So, in a moment of desperation I thought I would disable UAC, knowing that it would not possibly make any difference, I mean it's a Mircrosoft patch being installed by a Microsoft service, right?

    And @#$% me, worked!!

    You have got to love that : )

    
    
    
    
    
    
    
    Thursday, February 07, 2013 4:13 AM
  • HUGE thanks. I have been searching for weeks to try and get my .NET install to work and NOTHING would work. I found this fix, ran the installer, and it worked perfectly.
    Wednesday, February 20, 2013 10:09 AM
  • Hi everyone,

    In my case the solution was the next:

    1.- Download the full installer packages from Microsoft website

    2.- Extract them in a local folder

    3.- Go to Internet Explorer options -> Advanced

    4.- Scroll down to "Security" and:

    Check "Allow software to run or install even if the signature is invalid"

    Uncheck "Check for publisher's certification revocation"

    Uncheck "Check for signatures on downloaded programs"

     

    Then all updates were installed clicking in their setup.exe files.

    Of course, you should not forget restore the Internet Advanced settings to previous status... :)

    I hope it will be useful

    Tuesday, July 23, 2013 7:25 AM
  • Thanks Muhammad Ghaznawi.  This did the trick for me as well.  I was trying to install Movie Maker and Photo Gallery on Windows 7 x64 and got a DotNet 40 error.  Your fix got DotNet and the Windows Essenials programs installed. Bravo!
    • Edited by B_Mad Saturday, February 15, 2014 9:06 PM
    Saturday, February 15, 2014 9:04 PM