Tuesday, April 30, 2013

[SOLVED] The timestamp signature and/or certificate could not be verified or is malformed.


It may happen that CAT files that you got from Microsoft after passing HCK/WHQL will not be recognized as valid by operating system (You will see "Can't verify publisher" popup message during driver installation).

!    sig: 09:59:48.051                Verifying file against specific (valid) catalog failed! (0x80096005)
!    sig: 09:59:48.051                Error 0x80096005: The timestamp signature and/or certificate could not be verified or is malformed.

Don't waste your time trying to find correct Windows Update package to update root certificates.

This problem sometimes happens and this is problem on Microsoft side.

There are two possible solutions:
  • Email support (sysdev@microsoft.com) to get new CAT file (the slowest way, but Microsoft will provide CAT free of charge)
  • Resubmit HCK submission and get a new CAT file (the fastest way, cost additional money)
If you are experiencing problem above with something else (e.g. you have signed your executable and you are facing "Error 0x80096005: The timestamp signature and/or certificate could not be verified or is malformed"), then it means you have to change time stamping authority that you are passing to signtool.

No comments: