General discussion


Security Patch Digital signature

By inniss ·
While trying to install the RPC security patch to prevent MSblast worm on a W2K DC, I got a "Software package unknown". It said the Patch was not signed by Microsoft. When I say install anyway it shuts down saying it can not verify the "update.ini" file.
Efforts to install the certificate associated with the patch has got me nowhere.
This is probally easy stuff but I don't have a clue what to do get it to install. Any help will be appreciated

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by Joseph Moore In reply to Security Patch Digital si ...

On a Microsoft newsgroup, I found this:

If you have having problems installing the patch . try this:
Service Pack 1 Setup could not verify the integrity of the file. Make
sure the Cryptographic service is running on this computer
NB: This issue will also cause DirectX 9.0/a setup to report it is
incompatible with Windows XP.

This problem can occur if the Cryptographic Service is Disabled in
services.msc or a file within %Systemroot%\System32\Catroot2 folder has
become corrupt.
An update is now available that can correct this issue, to obtain it
visit the Windows Update site and download Q817287: Critical Update
(Catalog Database Corruption in Microsoft Windows), this should correct
the problem and prevent it in future. This update will not appear on the
Windows Update site unless you have Service Pack 1 for Windows XP
installed. If the update does not install correctly or does not fix the
problem follow the steps below.
To correct this issue, first go Start > Run and enter services.msc
A list of Windows Services should now appear on your screen, scroll down
the list until you find Cryptographic Services. Right click this and
select properties. Now ensure that the startup type is set to automatic
and click the start button in that window if the service status is
If the problem persists, go to run and type in cmd then click ok.
Next type in the following commands, at the end of each line press the
return key on your keyboard
net stop cryptsvc
ren %systemroot%\system32\catroot2 oldcatroot2
net start cryptsvc
Now attempt to run the Service Pack 1/DX9 installer again"

Collapse -

by Joseph Moore In reply to

So, check if Cryptographic Services is running. If not, turn it on, then put the patch on.
If that does not do it, then go to:
And read on getting a patch.

Good luck.

Collapse -

by Joseph Moore In reply to

And, if you have Win2K, read this Technet article:

Collapse -

by inniss In reply to Security Patch Digital si ...

THE ARTICLE 281458 has helped to sovle the problem of not verifying the update.ini. This along with changing the security settings to allow "unsigned drivers" to install has sovled the problem.

Thanks a MILLION

Related Discussions

Related Forums