Problem Signing Large MSI file

  • Thread starter Thread starter Thatcham
  • Start date Start date
T

Thatcham

Hi,

Posted this in microsoft.public.platformsdk.security....was informed to post
it here instead!

I have created a large MSI database (1.32GB) using Installshield 2008 and it
failed on signing the MSI. Fair enough, I thought, a bit odd, but I can sign
the file myself.

I ran the following cmd line:
signtool sign /a /n "Blah" /d "Blah Blah" /t
http://timestamp.verisign.com/scripts/timstamp.dll install.msi

got the following output:

Done Adding Additional Store
SignTool Error: ISignedCode::Sign returned error: 0xC0000005
An unknown error has occured. Please contact your vendor for
assistance.

SignTool Error: An error occurred while attempting to sign: install.msi

Number of errors: 1

--

Now, using the exact same command line, I have no trouble signing
executables/msp's etc and a previous version of the file (at around 900 MB)
signed successfully about 8 months ago.

For the record, the installation runs fine.

I can't seem to find any information on the interwebs, so I turn to MSDN.

Can someone point me to at least a starting point to solving the problem,
please?

I am using Vista x64 Business with SP1RC and 2003 Server SDK R2

Thanks
 
I do not have your answer. But I do recall something that seems
it may be related: back when service pack 1 for Visual Studio
2005 released it would fail to install and MS posted directions
for a work-around for the failure to verify signature of the MSI
due to the large size of the MSI (basically disabling the required
verification for administrators was the work-around).
The release notes for the SP point to
http://support.microsoft.com/kb/925336/en-us
which basically says that there has to be sufficient contiguous
memory and which says this is W2k3 SP1 (which usually also
means W2k3 R2 gold) specific.

So, perhaps you should follow up with msi related KBs (?)
Just how to turn from verification of signing to the act of signing
and get at info on this is an open question for me however.

Roger

"Thatcham" <Thatcham@noemail.noemail> wrote in message
news:882AF353-5962-4A01-A010-11200FF08F9C@microsoft.com...
> Hi,
>
> Posted this in microsoft.public.platformsdk.security....was informed to
> post
> it here instead!
>
> I have created a large MSI database (1.32GB) using Installshield 2008 and
> it
> failed on signing the MSI. Fair enough, I thought, a bit odd, but I can
> sign
> the file myself.
>
> I ran the following cmd line:
> signtool sign /a /n "Blah" /d "Blah Blah" /t
> http://timestamp.verisign.com/scripts/timstamp.dll install.msi
>
> got the following output:
>
> Done Adding Additional Store
> SignTool Error: ISignedCode::Sign returned error: 0xC0000005
> An unknown error has occured. Please contact your vendor for
> assistance.
>
> SignTool Error: An error occurred while attempting to sign: install.msi
>
> Number of errors: 1
>
> --
>
> Now, using the exact same command line, I have no trouble signing
> executables/msp's etc and a previous version of the file (at around 900
> MB)
> signed successfully about 8 months ago.
>
> For the record, the installation runs fine.
>
> I can't seem to find any information on the interwebs, so I turn to MSDN.
>
> Can someone point me to at least a starting point to solving the problem,
> please?
>
> I am using Vista x64 Business with SP1RC and 2003 Server SDK R2
>
> Thanks
>
>
 
Can't say about Vista, but for WS2003, see *if* this applies:

You cannot distribute or install a software package in Windows Server
2003 if the software package contains a very large signed file
http://support.microsoft.com/kb/938759

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Thatcham wrote:

> Hi,
>
> Posted this in microsoft.public.platformsdk.security....was informed to post
> it here instead!
>
> I have created a large MSI database (1.32GB) using Installshield 2008 and it
> failed on signing the MSI. Fair enough, I thought, a bit odd, but I can sign
> the file myself.
>
> I ran the following cmd line:
> signtool sign /a /n "Blah" /d "Blah Blah" /t
> http://timestamp.verisign.com/scripts/timstamp.dll install.msi
>
> got the following output:
>
> Done Adding Additional Store
> SignTool Error: ISignedCode::Sign returned error: 0xC0000005
> An unknown error has occured. Please contact your vendor for
> assistance.
>
> SignTool Error: An error occurred while attempting to sign: install.msi
>
> Number of errors: 1
>
> --
>
> Now, using the exact same command line, I have no trouble signing
> executables/msp's etc and a previous version of the file (at around 900 MB)
> signed successfully about 8 months ago.
>
> For the record, the installation runs fine.
>
> I can't seem to find any information on the interwebs, so I turn to MSDN.
>
> Can someone point me to at least a starting point to solving the problem,
> please?
>
> I am using Vista x64 Business with SP1RC and 2003 Server SDK R2
>
> Thanks
>
>
 
Back
Top