• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 900
  • Last Modified:

InstallShield: Deploying Signed Package Without Outbound Internet Access

Using IS 2009 Premier:
MSI: Basic
Certificate: Thawte

Trying to find out how to install a signed package on a machine that does not have outbound internet access.

We are deploying a web application (customer will have IIS 7).

Thanks,

Rick
0
sadlermd
Asked:
sadlermd
  • 3
  • 3
3 Solutions
 
Vadim RappCommented:
Should be no problem at all. Having signed code does not mean you need internet connection in order to use it.
0
 
sadlermdAuthor Commented:
I found the answer - you must make sure that the root certificate is found on the target computer.

When we tried installing our application on servers where outbound internet access was not available, we got a 1330 error that included a 266 error message: "Error 266 was returned by WinVerifyTrust".

After we imported the required root certificates, the problem went away.

http://www.verisign.com/support/roots.html
0
 
sadlermdAuthor Commented:
I've requested that this question be closed as follows:

Accepted answer: 0 points for sadlermd's comment #37806758

for the following reason:

works...
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
Vadim RappCommented:
The original question was answered in the comment 37803835. The problem with the machine not having root certificate is different - the initial set of root certificates is installed with Windows; later they may be updated, but not doing it only results in problems when the machine encounters a certificate signed by signing authority unknown to it. In that case the administrator must obtain the root certificate of the authority who signed the certificate, and decide whether he trusts it or not.  This can be acbieved by obtaining updated Microsoft list, if this authority is there; but you can also obtain it directly from the authority that signed it - such as if you work with a developer, who can produce his certificate but does not want to pay Verisign hundreds of dollars, because he is working only for you so he can simply send you his certificate and you make it trusted in your organization; it's equally possible to refuse to trust an authority from Microsoft list if you want to. Also you can simply put this specific certificate into enterprise trust.

In any case, the answer to the original question "how to install a signed package on a machine that does not have outbound internet access" is "you don't need internet access to install signed package". If there are further problems, like in this case, they should be dealt with accordingly.

The proposed answer answers entirely different problem, described in the answer itself.
0
 
sadlermdAuthor Commented:
Asking *how* to do something implies directions - and although it is true you don't need internet access to install signed packages, it does require a couple of things  be in place for it to work!

How to install a signed package when outbound internet access is not available:

1. Make sure required root certificate(s) is on the target computer (use mmc.exe to check)
2. If not, add (import) them (be sure to provide a link to root certificates)
3. Run installation

If the root certificate doesn't exist and the cert can't authenticate via the internet, the installation will throw a 1330 error along with a 266 error...

Hope this helps...
0
 
Vadim RappCommented:
No, I'd say it's easier than that.

1. launch the installation
  2a if there's no error (which is in 99%), then enjoy the product.
  2b. if there's an error, find out what the error is and address accordingly.
      3. if #2b is difficult, than post the error on E-E and seek help. So this question would be not "how to run installation w/o internet" but "what to do with error xxx".

Since in 99% it's 2a, no need to even think about root certificates before you run the installation.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

The 14th Annual Expert Award Winners

The results are in! Meet the top members of our 2017 Expert Awards. Congratulations to all who qualified!

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now