Error 1718: <file> was rejected by digital signature policy

[adamf]

I've got a piece of software that has been deployed to a bunch of machines using SCCM which appear to complete successfully. When students run it, it looks like something is being configured as the install runs again and generates the error: Error 1718 was recjected by digital signal policy and the software refuses to run.

 

At first I assumed Applocker was to blame as I found this Verify AppLocker Policy | and when I ran the command on one of the affected machines it came back as Disallowed. So, I made the changes to allow anything from the C:\Windows\ccmcache\ folder and subfolders to run thinking that would solve it, no.

 

Then I found this: FIX: Error message when you try to install a large Windows Installer package or a large Windows Installer patch package in Windows Server 2003 or in Windows XP: "Error 1718. File was rejected by digital signature policy"

 

The hotfix is no good because it's only for XP and Server 2003, but I tried the registry workaround and that didn't work.

 

I'm now out of ideas.... Anybody come across this before?

[Arthur]

When students run it, it looks like something is being configured as the install runs again and generates the error: Error 1718 was rejected by digital signature policy and the software refuses to run.

Edit. Is the digital signature on the MSI valid?

Edited March 2, 2014 by Arthur

[adamf]

That path is actually one of the default rules created by Applocker and is already in place.