Share via

.NET Framework 4 Error: "Generic Trust Failure" (0x800B010B)

  • Article

While installing .Net Framework 4.0, you might encounter with the below error: Installation failed with error code: (0x800B010B), "Generic trust failure”

From the log snippet:

[4/1/2011, 14:18:27]C:\11f6f1228c8fb51ff5\Windows6.0-KB956250-v6001-x86.msu - Signature verification for file Windows6.0-KB956250-v6001-x86.msu (C:\11f6f1228c8fb51ff5\Windows6.0-KB956250-v6001-x86.msu) failed with error 0x800b0101 (A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.)

[4/1/2011, 14:18:27]Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure”

In my scenario, there was an encryption software called Entrust. This could inject itself into the install and cause the generic trust error. The .Net Framework 4.0 was signed within the validity period of the certificate, the timestamp on the signature indicates the same. The certificate is valid from 12/7/2009 – 3/7/2011, and the signature was time stamped on 3/18/2010.

Possible solutions to this problem are mentioned below:

· Add the certificate information to the white list.

· Revert the system date to a date earlier than 7 Mar 2011 and then install the Netfx 4.0 setup.

· Uninstall Entrust, install framework and reinstall Entrust.

Comments

  • Anonymous
    November 15, 2011
    We had a similar problem. Upgrading from Entrust 8.0 to 9.0 before installing .NET 4.0 was our solution

  • Anonymous
    November 20, 2011
    So it seems that the above issue was fixed in the next version of Entrust.

  • Anonymous
    January 05, 2012
    I do not have entrust installed. Installation Log Message Types:   Errors    Verbose    Messages     Message Details:   Date Time           © 2009 Microsoft Corporation. All rights reserved. Terms of Use. [1/6/2012, 8:5:43] OS Version Information: ... [1/6/2012, 8:5:43]OS Version = 6.0.6002, Platform 2, Service Pack 2 [1/6/2012, 8:5:43]OS Description = Win2K8 - x86 Enterprise Edition Service Pack 2 [1/6/2012, 8:5:43] OS Version Information [1/6/2012, 8:5:43] Environment details: ... [1/6/2012, 8:5:43]CommandLine = i:695aae1421f582b5b30cSetup.exe [1/6/2012, 8:5:43]TimeZone = Central Standard Time [1/6/2012, 8:5:43]Initial LCID = 1033 [1/6/2012, 8:5:43] Environment details [1/6/2012, 8:5:43]Loading localized engine data for language 1033 from i:695aae1421f582b5b30c1033LocalizedData.xml [1/6/2012, 8:5:43] Entering Function: LocalizedData::CreateLocalizedData... [1/6/2012, 8:5:43] exiting function/method [1/6/2012, 8:5:43] succeeded [1/6/2012, 8:5:43] Entering Function: EngineData::CreateEngineData... [1/6/2012, 8:5:43]Current SetupVersion = 1.0 [1/6/2012, 8:5:43]SetupVersion specified in ParameterInfo.xml is '1.0' [1/6/2012, 8:5:43]patch NDP40-KB2656351.msp added [1/6/2012, 8:5:43]Adding Item type "Patches", local path (not applicable) [1/6/2012, 8:5:43]No ProcessBlock element [1/6/2012, 8:5:43]No ServiceBlock element [1/6/2012, 8:5:43]Using Simultaneous Download and Install mechanism [1/6/2012, 8:5:43] exiting function/method [1/6/2012, 8:5:43] succeeded [1/6/2012, 8:5:43] MaintenanceMode determination: evaluating EnterMaintenanceModeIf... [1/6/2012, 8:5:43]evaluating EnterMaintenanceModeIf: [1/6/2012, 8:5:43]returning false [1/6/2012, 8:5:43] MaintenanceMode determination evaluates to 'not in maintenance mode' [1/6/2012, 8:5:44] Operation Type: ... [1/6/2012, 8:5:44]Operation: Installing [1/6/2012, 8:5:44] Operation Type [1/6/2012, 8:5:44] Package details: KB2656351... [1/6/2012, 8:5:44]Package Name = KB2656351 [1/6/2012, 8:5:44]Package Version = 10.0.30319 [1/6/2012, 8:5:44] Package details [1/6/2012, 8:5:44] User Experience Data Collection Policy: ... [1/6/2012, 8:5:44]User Experience Data Collection Policy: Disabled [1/6/2012, 8:5:44] User Experience Data Collection Policy [1/6/2012, 8:5:44] Entering Function: UiDataT::CreateUiDataT... [1/6/2012, 8:5:44]Loading file - i:695aae1421f582b5b30cUiInfo.xml [1/6/2012, 8:5:44]Add to schema collection schema file - i:695aae1421f582b5b30cSetupUi.xsd [1/6/2012, 8:5:44]Successfuly found file i:695aae1421f582b5b30c1033SetupResources.DLL [1/6/2012, 8:5:44]Successfuly found file i:695aae1421f582b5b30cStrings.xml [1/6/2012, 8:5:44] exiting function/method [1/6/2012, 8:5:44] succeeded [1/6/2012, 8:5:44] Global Block Checks: Checking for global blockers... [1/6/2012, 8:5:44] Global Block Checks no blocking conditions found [1/6/2012, 8:5:44]OpenFileMapping fails with last error: 6 [1/6/2012, 8:5:44]The handle to the section is Null [1/6/2012, 8:5:44]OpenFileMapping fails with last error: 6 [1/6/2012, 8:5:44]The handle to the section is Null [1/6/2012, 8:5:44] Applicability for Installing: evaluating each item... [1/6/2012, 8:5:44] Determining state: of i:695aae1421f582b5b30cNDP40-KB2656351.msp... [1/6/2012, 8:5:44]evaluating ApplicableIf: [1/6/2012, 8:5:44] Exists: evaluating... [1/6/2012, 8:5:44]MsiXmlBlob: this patch is applicable [1/6/2012, 8:5:44] Exists evaluated to true [1/6/2012, 8:5:44]evaluating IsPresent: [1/6/2012, 8:5:44] Exists: evaluating... [1/6/2012, 8:5:44]MsiGetCachedPatchPath with patch code {4952F442-5C1A-38EB-8C23-B18EFE77E20C} failed [1/6/2012, 8:5:44] Exists evaluated to false [1/6/2012, 8:5:44] Determining state of i:695aae1421f582b5b30cNDP40-KB2656351.msp - available but not verified yet [1/6/2012, 8:5:44] Determining state: of i:695aae1421f582b5b30cSetupUtility.exe... [1/6/2012, 8:5:44] Determining state of i:695aae1421f582b5b30cSetupUtility.exe - available but not verified yet [1/6/2012, 8:5:44]evaluating ApplicableIf: [1/6/2012, 8:5:44] Exists: evaluating... [1/6/2012, 8:5:44]MsiXmlBlob: this patch is applicable [1/6/2012, 8:5:44] Exists evaluated to true [1/6/2012, 8:5:44]evaluating IsPresent: [1/6/2012, 8:5:44] Exists: evaluating... [1/6/2012, 8:5:44]MsiGetCachedPatchPath with patch code {4952F442-5C1A-38EB-8C23-B18EFE77E20C} failed [1/6/2012, 8:5:44] Exists evaluated to false [1/6/2012, 8:5:44] Applicability for Installing determination is complete [1/6/2012, 8:5:44] Applicability Result Count: ... [1/6/2012, 8:5:44]Number of applicable items: 1 [1/6/2012, 8:5:44] Applicability Result Count [1/6/2012, 8:5:44]evaluating ApplicableIf: [1/6/2012, 8:5:44] Exists: evaluating... [1/6/2012, 8:5:44]MsiXmlBlob: this patch is applicable [1/6/2012, 8:5:44] Exists evaluated to true [1/6/2012, 8:5:44]evaluating IsPresent: [1/6/2012, 8:5:44] Exists: evaluating... [1/6/2012, 8:5:44]MsiGetCachedPatchPath with patch code {4952F442-5C1A-38EB-8C23-B18EFE77E20C} failed [1/6/2012, 8:5:44] Exists evaluated to false [1/6/2012, 8:5:44] Summary Information: 1.Microsoft .NET Framework 4 Client Profile 2.Microsoft .NET Framework 4 Extended [1/6/2012, 8:5:49]Successfuly found file i:695aae1421f582b5b30c1033EULA.rtf [1/6/2012, 8:5:53] Action: System Requirement Checks... [1/6/2012, 8:5:53] Action: Disk space check for items being downloaded... [1/6/2012, 8:5:53]Drive:[C:] Bytes Needed:[5115392] Bytes Available:[36161482752] [1/6/2012, 8:5:53] Action complete [1/6/2012, 8:5:53] Action: Enumerating incompatible processes... [1/6/2012, 8:5:53]No Blocking Processes [1/6/2012, 8:5:53] Action complete [1/6/2012, 8:5:53] Action: Enumerating incompatible services... [1/6/2012, 8:5:53]No Blocking Services [1/6/2012, 8:5:53] Action complete [1/6/2012, 8:5:53] Action complete [1/6/2012, 8:5:53]Launching Download and Install operations simultaneously. [1/6/2012, 8:5:53] Action: Downloading and/or Verifying Items... [1/6/2012, 8:5:53]Verifying Digital Signatures: i:695aae1421f582b5b30cNDP40-KB2656351.msp [1/6/2012, 8:5:53] i:695aae1421f582b5b30cNDP40-KB2656351.msp: Verifying signature for NDP40-KB2656351.msp... [1/6/2012, 8:5:53]i:695aae1421f582b5b30cNDP40-KB2656351.msp - Signature verification for file NDP40-KB2656351.msp (i:695aae1421f582b5b30cNDP40-KB2656351.msp) failed with error 0x800b010e (The revocation process could not continue - the certificate(s) could not be checked.) [1/6/2012, 8:5:53] i:695aae1421f582b5b30cNDP40-KB2656351.msp Signature could not be verified for NDP40-KB2656351.msp [1/6/2012, 8:5:53]No FileHash provided. Cannot perform FileHash verification for NDP40-KB2656351.msp [1/6/2012, 8:5:53]File NDP40-KB2656351.msp (i:695aae1421f582b5b30cNDP40-KB2656351.msp), failed authentication. (Error = -2146762482). It is recommended that you delete this file and retry setup again. [1/6/2012, 8:5:53]Failed to verify and authenticate the file -i:695aae1421f582b5b30cNDP40-KB2656351.msp [1/6/2012, 8:5:53]Please delete the file, i:695aae1421f582b5b30cNDP40-KB2656351.msp and run the package again [1/6/2012, 8:5:53] Action complete [1/6/2012, 8:5:53]calling PerformAction on an installing performer [1/6/2012, 8:5:53] Action: Performing actions on all Items... [1/6/2012, 8:5:53]Wait for Item (NDP40-KB2656351.msp) to be available [1/6/2012, 8:5:54]Final Result: Installation failed with error code: (0x800B010B), "Generic trust failure. " (Elapsed time: 0 00:00:11). [1/6/2012, 8:6:10]WM_ACTIVATEAPP: Focus stealer's windows WAS visible, NOT taking back focus [1/6/2012, 8:7:9]WM_ACTIVATEAPP: Focus stealer's windows WAS visible, NOT taking back focus [1/6/2012, 8:7:25]WM_ACTIVATEAPP: Focus stealer's windows WAS visible, NOT taking back focus

  • Anonymous
    February 19, 2012
    Had the same (0x800B010B), "Generic trust failure. " for both KB2656351 and KB2600217. After trying all the other suggestions from all over the web, installing worked for me as a LOCAL admin rather than with my domain user account (which is also a local admin). Very odd.

  • Anonymous
    March 07, 2012
    social.technet.microsoft.com/.../a2f5ae71-c4e8-4523-8817-dbc9161396a1

  • Anonymous
    September 16, 2012
    Kai - that worked perfectly for me too - Local admin login instead of domain admin account. Thanks for the post.

  • Anonymous
    March 21, 2014
    It worked for me too. When using the local admin account. Thanks for the post.

  • Anonymous
    June 19, 2014
    I encountered same error while installing dot net framework 4. Instead of admin login I tried with local admin account and it worked perfectly. Thanks a lot for the post.

  • Anonymous
    November 05, 2014
    Local admin login instead of domain admin account worked for me, Thanks a lot for the post.