[wix-users] Certificate Install Error in Windows 7

[Nathan Roe]

Yes.  Like I said, the install works fine when UAC is disabled.


Nathan  Roe
Senior Software Engineer

317-805-4013 P

nroe at ZotecPartners.com

Corporate




Visit us at:
http://www.zotecpartners.com



Zotec Partners, LLC disclaimer information

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Wheeler, Blaine (DSHS/DCS)
Sent: Friday, January 20, 2017 2:45 PM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] Certificate Install Error in Windows 7

Is the pfx file in the Binary table in the msi?

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Nathan Roe
Sent: Friday, January 20, 2017 11:35 AM
To: WiX Toolset Users Mailing List
Subject: Re: [wix-users] Certificate Install Error in Windows 7

I'm using a domain account that is in the local administrators group.


Nathan  Roe
Senior Software Engineer

317-805-4013 P

nroe at ZotecPartners.com

Corporate




Visit us at:
http://www.zotecpartners.com



Zotec Partners, LLC disclaimer information

-----Original Message-----
From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On Behalf Of Fyodor Koryazhkin
Sent: Friday, January 20, 2017 11:55 AM
To: WiX Toolset Users Mailing List <wix-users at lists.wixtoolset.org>
Subject: Re: [wix-users] Certificate Install Error in Windows 7

Hi,
Did you define password for built in user Administrator on the computer?.
By default after installation of windows this user has empty password and you need to define the password for it. Only this user has FULL rights on the computer, being the member of administrative group does not grant full permissions.
In every new windows version Microsoft hardens the security and therefore the behavior may differ from version to version.

On Fri, Jan 20, 2017 at 6:44 PM, Nathan Roe <nroe at zotecpartners.com> wrote:

> Disabling UAC and running the installer as the same user works.
> Doesn't that mean the user does have access?  I'm testing this with a
> local admin account.
>
>
> Nathan  Roe
> Senior Software Engineer
>
> 317-805-4013 P
>
> nroe at ZotecPartners.com
>
> Corporate
>
>
>
>
> Visit us at:
> http://www.zotecpartners.com
>
>
>
> Zotec Partners, LLC disclaimer information
>
> -----Original Message-----
> From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On
> Behalf Of Wheeler, Blaine (DSHS/DCS)
> Sent: Friday, January 20, 2017 11:29 AM
> To: 'WiX Toolset Users Mailing List' <wix-users at lists.wixtoolset.org>
> Subject: Re: [wix-users] Certificate Install Error in Windows 7
>
> I suspect the user executing the installation doesn't have rights to
> manage the 'Local Machine' certificate store location.  Changing from
> localMachine to currentUser may do the trick
>
>
> -----Original Message-----
> From: wix-users [mailto:wix-users-bounces at lists.wixtoolset.org] On
> Behalf Of Nathan Roe
> Sent: Friday, January 20, 2017 5:04 AM
> To: wix-users at lists.wixtoolset.org
> Subject: [wix-users] Certificate Install Error in Windows 7
>
> I have the following setup in my installer (WiX 3.10.3):
>
> <Binary Id="LocalhostPfx" SourceFile="localhost.pfx" /> ...
> <iis:Certificate Id="LocalhostPersonalCertificate"
> BinaryKey="LocalhostPfx" Name="localhost" StoreLocation="localMachine"
> StoreName="personal" Overwrite="yes" PFXPassword="*****" Request="no"
> />
>
> This works correctly in Windows 10 and Windows 7 when UAC is disabled.
> However, I get the following error in my install log in Windows 7 when
> UAC is enabled:
>
> InstallCertificates: Error 0x80090010: Failed to open PFX file.
> InstallCertificates: Error 0x80090010: Failed to get SHA1 hash of
> certificate.
> InstallCertificates: Error 0x80090010: Failed to resolve certificate:
> LocalhostPersonalCertificate CustomAction InstallCertificates returned
> actual error code 1603 (note this may not be 100% accurate if
> translation happened inside sandbox)
>
> Can anyone help me work around this?
>
> Thanks,
> Nathan
>
> Nathan Roe
> Senior Software Engineer
>
> 317-805-4013 P
>
> nroe at ZotecPartners.com
>
> Corporate
>
>
>
>
> Visit us at:
> http://www.zotecpartners.com
>
> [http://www.zotecpartners.com/zpllc_logo_ironport.gif]
>
> Zotec Partners, LLC
> disclaimer<http://www.zotecpartners.com/electronic_
> disclaimer.html> information
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>
>
> ____________________________________________________________________
> WiX Toolset Users Mailing List provided by FireGiant
> http://www.firegiant.com/
>



--
Regards,
Fyodor Koryazhkin..

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/


____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/

____________________________________________________________________
WiX Toolset Users Mailing List provided by FireGiant http://www.firegiant.com/