You cannot install some updates or programs in Windows XP

Applies to: Microsoft Windows XP Home EditionMicrosoft Windows XP ProfessionalMicrosoft Windows XP Starter Edition More

Summary


This article offers you some advanced manual methods that can be used to fix some problems that prevent you from installing some updates or programs in Windows XP. 

Resolution


Symptoms


When you try to download an ActiveX control, install an update to Windows or to a Windows component, install a service pack for Windows or for a Windows component, or install a Microsoft or third-party software program, you may experience one or more of the following symptoms:​​​​​​​
Note These problems may occur for these reasons.

  • You receive the following error message when you try to install a program or update:
    Digital Signature Not Found
    The Microsoft digital signature affirms that software has been tested with Windows and that the software has not been altered since it was tested.
    The software you are about to install does not contain a Microsoft digital signature. Therefore, there is no guarantee that this software works correctly with Windows.
    Name of software package
    If you want to search for Microsoft digitally signed software, visit the Windows Update Web site at http://update.microsoft.com to see if one is available.
    Do you want to continue the installation?

    If you click More Info, you receive the following message:
    Microsoft Windows
    The signature on the software package you want to install is invalid. The software package is not signed properly.

    After you click OK in the first error message dialog box, you receive a message that states that the installation was successful, or you receive the following error message:
    Name of Update Package
    The cryptographic operation failed due to a local security option setting.
  • When you try to install an update or to install a service pack, you receive an error message that is similar to one of the following:
    • Name of Update Package
      Setup could not verify the integrity of the file Update.inf. Make sure the Cryptographic service is running on this computer.
    • Failed to install catalog files.
    • The software you are installing has not passed Windows Logo testing to verify its compatibility with Windows XP. (Tell me why this testing is important.)

      This software will not be installed. Contact your system administrator.
    • The software you are installing has not passed Windows Logo testing to verify its compatibility with this version of Windows. (Tell me why this testing is important.)
  • When you try to install a Windows XP service pack, you receive an error message that is similar to the following:
    Service Pack 1 Setup could not verify the integrity of the file. Make sure the Cryptographic service is running on this computer.
  • When you attempt to install Microsoft Data Access Components (MDAC) 2.8 you receive an error message that is similar to the following:
    INF Install failure. Reason: The timestamp signature and/or certificate could not be verified or is malformed.
     
  • The %WINDIR%\System32\CatRoot2\Edb.log may grow to 20 megabytes (MB) even though the file is typically less than 1 MB.
  • When you try to install a package from the Windows Update Web site or from the Microsoft Update Web site, you receive a message that is similar to the following:
    The software has not passed Windows logo testing and will not be installed.
  • When you examine the %systemroot%\Windowsupdate.log file, you see an entry for one of the following errors:​​​​​​​
    • 0x80096001
    • 0x80096005
    • 0x80096010
    • 0x800B0001
    • 0x800B0003
    • 0x800B0004
    • 0x800B0109
    • 0x8007f0da 
    • 0x8007f01e
  • When you use Microsoft windows update on a Windows XP-based computer, the update process fails, and you receive a "0x8007f007" error message. This may occur regardless of what type of update you select.
  • The Svcpack.log file may contain entries that are similar to the following:
    937.406: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\system32 \CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.0.scw.cat with error 0x57 937.437: GetCatVersion: Failed to retrieve version information from C:\WINDOWS\Tmp.0.scw.cat with error 0x80092004 940.344: InstallSingleCatalogFile: MyInstallCatalog failed for Tmp.0.scw.cat; error=0xfffffbfe. 940.344: DoInstallation:MyInstallCatalogFiles failed:STR_CATALOG_INSTALL_FAILED 955.125: UnRegisterSpuninstForRecovery, failed to delete SpRecoverCmdLine value, error 0x2 955.125: DoInstallation: Failed to unregistering spuninst.exe for recovery. 962.656: DeRegistering the Uninstall Program -> Windows Server 2003 Service Pack, 0 962.656: Failed to install catalog files. 1448.406: Message displayed to the user: Failed to install catalog files. 1448.406: User Input: OK 1448.406: Update.exe extended error code = 0xf01e 1448.406: Update.exe return code was masked to 0x643 for MSI custom action compliance.

Cause


These problems may occur in any of the following situations:
  • Log file or database corruption exists in the %Systemroot%\System32\Catroot2 folder.
  • Cryptographic Services is set to disabled.
  • Other Windows files are corrupted or missing.
  • The timestamp signature or certificate could not be verified or is malformed.
  • The hidden attribute is set for the %Windir% folder or one of its subfolders.
  • The Unsigned non-driver installation behavior Group Policy setting (Windows 2000 only) is set to Do not allow installation or Warn but allow installation, or the Policy binary value is not set to 0 in the following registry key: HKEY_LOCAL_MACHINE\Software\Microsoft\Non-Driver Signing
  • The Enable trusted publisher lockdown Group Policy setting is turned on, and you do not have the appropriate certificate in your Trusted Publishers certificate store. This Group Policy setting is located under User Configuration, under Windows Settings, under Internet Explorer Maintenance, under Security, under Authenticode Settings in the Group Policy MMC snap-in.
  • You are installing Internet Explorer 6 SP1, and the 823559 (MS03-023) security update is installed. For more information about this issue, view "The software you are installing has not passed Windows Logo testing..." error message when you try to install Internet Explorer 6 Service Pack 1. 
  • The software distribution folder is corrupted.

References


This problem has been reported to occur with the following updates:

322011 You cannot preview a fax in the Fax Console
329441 You cannot create a network connection after you restore Windows XP

More Information


For more information about how to configure automatic updates in Windows XP, view how to configure and use Automatic Updates in Windows XP .