.NET 4.7.2 failing to install on server 2008 r2

.NET 4.7.2 failing to install on server 2008 r2

Postby trodemaster » 26.09.2018, 18:07

I'm seeing failures of .NET 4.7.2 failing to install on Windows Server 2008 r2. This a prerequisite for a lot of other patches as well. The error from the log is.
Code: Select all
Tue 09/25/2018 16:02:31.89 - Warning: Installation of ..\dotnet\NDP472-KB4054530-x86-x64-AllOS-ENU.exe /passive /norestart /lcid 1033     failed (errorlevel: -2146762487)


Running this update via gui it gives the error
Code: Select all
.NET Framework 4.7.2 has not been installed because:

A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.


I found this article that discusses the issue.
https://blogs.msdn.microsoft.com/vsnets ... thority-2/

Based on that I suspect NDP472-KB4054530-x86-x64-AllOS-ENU.exe is attempting to download certs from the internet during installation and then fails if it can't. Maybe a prerequisite task needs to install those certs before running the .net 4.7.2 installer?

I'm looking into workarounds today but if anybody has ideas to share please advise?

Thanks,
Blake
trodemaster
 
Posts: 10
Joined: 20.05.2016, 00:02

Re: .NET 4.7.2 failing to install on server 2008 r2

Postby trodemaster » 26.09.2018, 20:03

As a workaround I'm scripting installation of this cert. Doing this before running the patching process allows .net 4.7.2 install to succeed.
Code: Select all
$client = new-object System.Net.WebClient
$client.DownloadFile( "http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt", "C:\windows\temp\MicRooCerAut2011_2011_03_22.crt" )
certutil -addstore -f root C:\windows\temp\MicRooCerAut2011_2011_03_22.crt
trodemaster
 
Posts: 10
Joined: 20.05.2016, 00:02

Re: .NET 4.7.2 failing to install on server 2008 r2

Postby boco » 26.09.2018, 21:36

See this old thread, the problem is not new: viewtopic.php?f=6&t=6098&p=22376

The thread also includes dumps of the root certs from MS. So, they could be imported, even when being completely offline.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2391
Joined: 24.11.2009, 17:00
Location: Germany

Re: .NET 4.7.2 failing to install on server 2008 r2

Postby aker » 26.09.2018, 22:42

Or use these files:
:arrow: viewtopic.php?f=7&t=6653
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: .NET 4.7.2 failing to install on server 2008 r2

Postby trodemaster » 27.09.2018, 00:13

Ah yeah missed those threads in my searching. So should we fix the wsusoffline to handle this? I have been using these exact tools for a couple years now and never ran into this problem. Seems like something external has changed recently?
trodemaster
 
Posts: 10
Joined: 20.05.2016, 00:02


Return to Installation / Updating

Who is online

Users browsing this forum: No registered users and 71 guests