Problem Signing Large MSI file

Problem Signing Large MSI file

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Problem Signing Large MSI file =?Utf-8?B?VGhhdGNoYW0=?= 01-24-2008
Posted by =?Utf-8?B?VGhhdGNoYW0=?= on January 24, 2008, 10:03 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

Posted this in microsoft.public.platformsdk.security....was informed to post
it here instead!

I have created a large MSI database (1.32GB) using Installshield 2008 and it
failed on signing the MSI. Fair enough, I thought, a bit odd, but I can sign
the file myself.

I ran the following cmd line:
signtool sign /a /n "Blah" /d "Blah Blah" /t
http://timestamp.verisign.com/scripts/timstamp.dll install.msi

got the following output:

Done Adding Additional Store
SignTool Error: ISignedCode::Sign returned error: 0xC0000005
An unknown error has occured. Please contact your vendor for
assistance.

SignTool Error: An error occurred while attempting to sign: install.msi

Number of errors: 1

--

Now, using the exact same command line, I have no trouble signing
executables/msp's etc and a previous version of the file (at around 900 MB)
signed successfully about 8 months ago.

For the record, the installation runs fine.

I can't seem to find any information on the interwebs, so I turn to MSDN.

Can someone point me to at least a starting point to solving the problem,
please?

I am using Vista x64 Business with SP1RC and 2003 Server SDK R2

Thanks



Posted by Roger Abell [MVP] on January 26, 2008, 1:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
I do not have your answer. But I do recall something that seems
it may be related: back when service pack 1 for Visual Studio
2005 released it would fail to install and MS posted directions
for a work-around for the failure to verify signature of the MSI
due to the large size of the MSI (basically disabling the required
verification for administrators was the work-around).
The release notes for the SP point to
http://support.microsoft.com/kb/925336/en-us
which basically says that there has to be sufficient contiguous
memory and which says this is W2k3 SP1 (which usually also
means W2k3 R2 gold) specific.

So, perhaps you should follow up with msi related KBs (?)
Just how to turn from verification of signing to the act of signing
and get at info on this is an open question for me however.

Roger

> Hi,
>
> Posted this in microsoft.public.platformsdk.security....was informed to
> post
> it here instead!
>
> I have created a large MSI database (1.32GB) using Installshield 2008 and
> it
> failed on signing the MSI. Fair enough, I thought, a bit odd, but I can
> sign
> the file myself.
>
> I ran the following cmd line:
> signtool sign /a /n "Blah" /d "Blah Blah" /t
> http://timestamp.verisign.com/scripts/timstamp.dll install.msi
>
> got the following output:
>
> Done Adding Additional Store
> SignTool Error: ISignedCode::Sign returned error: 0xC0000005
> An unknown error has occured. Please contact your vendor for
> assistance.
>
> SignTool Error: An error occurred while attempting to sign: install.msi
>
> Number of errors: 1
>
> --
>
> Now, using the exact same command line, I have no trouble signing
> executables/msp's etc and a previous version of the file (at around 900
> MB)
> signed successfully about 8 months ago.
>
> For the record, the installation runs fine.
>
> I can't seem to find any information on the interwebs, so I turn to MSDN.
>
> Can someone point me to at least a starting point to solving the problem,
> please?
>
> I am using Vista x64 Business with SP1RC and 2003 Server SDK R2
>
> Thanks
>
>



Posted by MowGreen [MVP] on January 29, 2008, 3:00 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Can't say about Vista, but for WS2003, see *if* this applies:

You cannot distribute or install a software package in Windows Server
2003 if the software package contains a very large signed file
http://support.microsoft.com/kb/938759

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Thatcham wrote:

> Hi,
>
> Posted this in microsoft.public.platformsdk.security....was informed to post
> it here instead!
>
> I have created a large MSI database (1.32GB) using Installshield 2008 and it
> failed on signing the MSI. Fair enough, I thought, a bit odd, but I can sign
> the file myself.
>
> I ran the following cmd line:
> signtool sign /a /n "Blah" /d "Blah Blah" /t
> http://timestamp.verisign.com/scripts/timstamp.dll install.msi
>
> got the following output:
>
> Done Adding Additional Store
> SignTool Error: ISignedCode::Sign returned error: 0xC0000005
> An unknown error has occured. Please contact your vendor for
> assistance.
>
> SignTool Error: An error occurred while attempting to sign: install.msi
>
> Number of errors: 1
>
> --
>
> Now, using the exact same command line, I have no trouble signing
> executables/msp's etc and a previous version of the file (at around 900 MB)
> signed successfully about 8 months ago.
>
> For the record, the installation runs fine.
>
> I can't seem to find any information on the interwebs, so I turn to MSDN.
>
> Can someone point me to at least a starting point to solving the problem,
> please?
>
> I am using Vista x64 Business with SP1RC and 2003 Server SDK R2
>
> Thanks
>
>

Similar ThreadsPosted
Problem with creating site server signing certificate template May 15, 2008, 2:43 pm
Code signing a "Flash" .EXE file issue / Code sign any .EXE? March 6, 2008, 6:48 am
Max OSX 10 on Large Windows Domain September 13, 2006, 10:23 am
Microsoft Folder with large number (486,692) of files July 23, 2008, 8:34 am
File encryption problem July 17, 2007, 4:22 pm
Help with file permissions and ICACLS.EXE problem August 3, 2007, 12:00 am
signing in June 21, 2005, 9:43 am
RE: Hotmail signing out July 26, 2005, 12:20 am
someone else is signing in on my email August 3, 2005, 10:14 pm
Hotmail Signing out December 1, 2005, 8:19 pm

The site map in XML format XML site map

Contact Us | Privacy Policy