If you tried to install Service Pack 1 for Visual Studio .NET 2005 (aka KB926601), via Microsoft Update or manually, chances are high that the upgrade failed. The reason is that the deployment MSI package is almost 500M large. Before the actual installation process begins, Windows tries to verify the package. In order to do it it needs to load it into a continuous block of memory. Since even modern machines might not have that much memory available, the process fails and causes the upgrade to fail as well. An error, similar to "Error 1718. File was rejected by digital signature policy" will be produced.

To fix the problem you can either increase the available memory by installing some extra and stopping all your processes (not very reliable), or disable the digital signature checking. The latter can be done by setting the value of the registry key

PolicyScope
in
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers
to 1. If the key is not present, simply create it (DWORD). Don't forget to revert your changes once done with the installation.

More information can be found in the following Microsoft support paper: "Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 or in Windows XP: "Error 1718. File was rejected by digital signature policy" .

Tags: computers
Categories: None |

5 comments have been posted.

    Feb. 26, 2008, 1:49 p.m. - Landon  
    Worked great. Thanks for posting this.
    Reply
    Sept. 6, 2007, 12:28 p.m. - sujatha  
    I had this problem and got resolved by following the above work around. Thanks.
    Reply
    Sept. 11, 2007, 8:10 a.m. - Andre  
    Nice to hear it helped you :)
    Reply
    April 11, 2007, 2:22 p.m. - Anonymous  
    Yeah and if that fails? I get the error on a brand new dual core with 2GB RAM. And I don't even have a PolicyScope key. Pretty pathetic attempt at a service pack!!
    Reply
    April 11, 2007, 2:26 p.m. - Andre  
    The Service Pack is far from perfect, I agree. More specifically, if you don't have the key, simply add it with the value mentioned. If that still doesn't work - you are out of luck :-)
    Reply
Your email: we will send you a confirmation link to this address to confirm your identity and to prevent robot posting
Get in touch
»...«
Follow updates

Join our social networks and RSS feed to keep up to date with latest news and publications