"A certificate chain could not be built to a trusted root authority" when you finish installing Visual Studio 2012

Article translations Article translations
Article ID: 2746268 - View products that this article applies to.
Expand all | Collapse all

Symptoms

When the Visual Studio 2012 installation is complete, the finish page displays the following:

Setup Completed
However, not all features installed correctly.

Please correct the following problems to ensure full product functionality. Click here to see the most common issues and workarounds or here to review the log file.

Microsoft Web Deploy 3.0
A certificate chain could not be built to a trust root authority.

If you click to view the log file and search for “Error,” you see log lines that resemble the following:

[05B0:0500][2012-08-05T14:07:07]: Acquiring package: webdeploy_x64_en_usmsi_902, payload: webdeploy_x64_en_usmsi_902, copy from: D:\packages\WebDeploy\WebDeploy_x64.msi
[04E4:0564][2012-08-05T14:07:08]: Error 0x800b010a: Failed to verify certificate chain policy status.
[04E4:0564][2012-08-05T14:07:08]: Error 0x800b010a: Failed to get certificate chain for authenticode certificate.
[04E4:0564][2012-08-05T14:07:08]: Error 0x800b010a: Failed to verify signature of payload: webdeploy_x64_en_usmsi_902
[04E4:0564][2012-08-05T14:07:08]: Failed to verify payload: webdeploy_x64_en_usmsi_902 at path: C:\ProgramData\Package Cache\.unverified\webdeploy_x64_en_usmsi_902, error: 0x800b010a. Deleting file.
[04E4:0564][2012-08-05T14:07:08]: Error 0x800b010a: Failed to cache payload: webdeploy_x64_en_usmsi_902

Note Some of the information in your log files will differ from this particular example.

Cause

This problem occurs because some components in Visual Studio 2012 are signed by a Certificate Authority that is not installed on Windows 7 or Windows Server 2008 R2. Computers that are not connected to the Internet cannot automatically download these certificates.

Resolution

To resolve this problem, please download the root certificate updates that are described in the following Knowledge Base article:
  • 931125 Windows root certificate program members
Note The update applies to Windows XP, Windows Server 2003 and later versions. It will install on Windows 7 and Windows Server 2008 R2, which are the minimum supported Windows versions for Visual Studio 2012.

After you have installed the root certificate update, repair Visual Studio 2012 to install those packages affected by the problem that is described in this Knowledge Base article. To do this, follow these steps:

  1. Click Start, type Programs and Features, and then click Programs and Features in the search results.
  2. Find and select a product that is listed in the "Applies to" section.
  3. On the toolbar, click Change.
  4. Click Repair.
  5. Click Continue or Yes to elevate and continue with the installation, if you are prompted to do so.


More information

New root certificate authorities, which were created after Windows 7 and Windows Server 2008 R2 were released, enable strong signatures using a SHA256 hash. Computers that are connected to the Internet automatically download these certificates. However, computers that are not connected to the Internet or that have not already installed the root certificate update do not have the required certificate authority installed.

After the updated certificate authorities are installed, repairing Visual Studio 2012 will install any missing components. Therefore, Web Deploy 3.0 or any other affected components will be installed.

Properties

Article ID: 2746268 - Last Review: November 16, 2012 - Revision: 2.0
Applies to
  • Microsoft Visual Studio Premium 2012
  • Microsoft Visual Studio Professional 2012
  • Microsoft Visual Studio Ultimate 2012
  • Microsoft Visual Studio Express 2012 for Web
Keywords: 
kbtshoot KB2746268

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com