Client install error 0x800b01C

Couldn’t verify ‘C:\WINDOWS\ccmsetup\ccmsetup.cab’ authenticode signature. Return code 0x800b0109

The problem:

Couldn’t verify ‘C:\WINDOWS\ccmsetup\ccmsetup.cab’ authenticode signature. Return code 0x800b0109 in CCMSetup.log

We had some client’s having install issues this week, they were getting ‘Couldn’t verify authenticode signature’¬† entry in their ccmsetup.log:

Client install error 0x800b01C
Client install error 0x800b01C

The Cause

The cause of this is the trusted root¬†certificate used to sign the ccmsetup.cab is not in the Trusted Enterprise Root’s store on the workstation.

The Fix

Grab the certificate

There are a couple of ways to fix this, but the way I chose is simple. Go find the file, right-click it and select Properties.

CCMSetup.cab Properties
CCMSetup.cab Properties

Next, we go to the Digital Signatures tab.

CCMSetup.cab Digital Signatures Tab
CCMSetup.cab Digital Signatures Tab

Select the certificate and click the Details button.

Digital Signature Details
Digital Signature Details

From there, click on View Certificate.

Certificate Properties
Certificate Properties

Click on the Certificate Path tab and select the root certificate.

Certificate Path Tab
Certificate Path Tab

Click the View Certificate Button.

Root Certificate
Root Certificate

Click the Details tab.

Root certificate Details tab
Root certificate Details tab

Click the Copy to a file button.

Certificate Export Wizard - Page 1
Certificate Export Wizard – Page 1

Click next two times.

Certificate Export Wizard - Page 3
Certificate Export Wizard – Page 3

Provide a file name (and remember it)

Certificate Export Wizard - Page 4
Certificate Export Wizard – Page 4

Click the finish button and we’re ready to install the cert.

Import the certificate

From the machine having the error, find the file you exported, right-click it and select Install Certificate. This will open the Install certificate Wizard.

Install Certificate Wizard - Page 1
Install Certificate Wizard – Page 1

Click Next.

Install Certificate Wizard - Page 2
Install Certificate Wizard – Page 2

Select the Place all certificates in the following store, then brows and select the Trusted Root Certificate Authorities. Click Next.

Install Certificate Wizard - Page 3
Install Certificate Wizard – Page 3

Click Finish on the Completing the Certificate import Wizard page.

That’s it! Now either restart the CCMSetup service if it’s there, or reinstall the client.