Windows Installer XML (WiX) toolset › wix-users

Patching a product without elevation

6 messages

Patching a product without elevation

Reply Threaded

My goal for getting patching to work is to be able to deploy an application that can be patched by a non-admin user, but I'm running into a problem. I've created the patching sample in the documentation, and the patch works when it's elevated, but whether or not it's signed, the patch is still prompting for elevation. I'm signing both the patch and the original MSI with this command lines:

signtool.exe sign /f signcert.pfx /p 288 /d "Patch Test application!" product.msi
signtool.exe sign /f signcert.pfx /p 288 /d "Patch Test application!" patch.msp

I've also modified the product msi from the example so that it includes this markup:

<PatchCertificates>
<DigitalCertificate SourceFile="signcert.cer" Id="signcert"/>
</PatchCertificates>

If I look at the properties of the files, both of them have a digital signature from the same certificate, and both are identified as valid. When I run the patch as a non-administrator though, I get an elevation prompt asking to install from an unknown publisher-the original installer correctly identified my certificate. Is there something else I'm missing? I saw the article in MSDN here (http://msdn.microsoft.com/en-us/library/aa372388%28VS.85%29.aspx), which pointed me to the MsiPatchCcertificate table and the PatchCertificates element. I've tried adding the cert both as the pfx file and as a base-64 encoded cer with the same effect. Is there something else that I'm missing here? Why is the patch still reporting itself as an unknown publisher?

Thanks for the help everyone,

Chris

------------------------------------------------------------------------------
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users

Rafael Rivera

Re: Patching a product without elevation

Reply Threaded

Chris,

Those elements appear to simply identify what certificate should be
given the green light for patching. I believe you still need to
digitally sign the resulting MSI using signtool.exe.

- Rafael

Chris Bardon wrote:

> My goal for getting patching to work is to be able to deploy an application that can be patched by a non-admin user, but I'm running into a problem. I've created the patching sample in the documentation, and the patch works when it's elevated, but whether or not it's signed, the patch is still prompting for elevation. I'm signing both the patch and the original MSI with this command lines:
>
> signtool.exe sign /f signcert.pfx /p 288 /d "Patch Test application!" product.msi
> signtool.exe sign /f signcert.pfx /p 288 /d "Patch Test application!" patch.msp
>
> I've also modified the product msi from the example so that it includes this markup:
>
> <PatchCertificates>
> <DigitalCertificate SourceFile="signcert.cer" Id="signcert"/>
> </PatchCertificates>
>
> If I look at the properties of the files, both of them have a digital signature from the same certificate, and both are identified as valid. When I run the patch as a non-administrator though, I get an elevation prompt asking to install from an unknown publisher-the original installer correctly identified my certificate. Is there something else I'm missing? I saw the article in MSDN here (http://msdn.microsoft.com/en-us/library/aa372388%28VS.85%29.aspx), which pointed me to the MsiPatchCcertificate table and the PatchCertificates element. I've tried adding the cert both as the pfx file and as a base-64 encoded cer with the same effect. Is there something else that I'm missing here? Why is the patch still reporting itself as an unknown publisher?
>
> Thanks for the help everyone,
>
> Chris
>
> ------------------------------------------------------------------------------
> _______________________________________________
> WiX-users mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>

Chris Bardon-2

Re: Patching a product without elevation

Reply Threaded

I did run signtool against the packages, with the command lines in the first part of the post.

I also forgot to point out a couple of other changes to the demo code. I changed the installer version to 300, and I set ALLUSERS to 1 to make sure that I installed per-machine to start with.

Something strange that I noticed in the patch log:

MSI (c) (24:FC) [15:23:03:443]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is admin assigned: LocalSystem owns the publish key.
MSI (c) (24:FC) [15:23:03:443]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is managed.
MSI (c) (24:FC) [15:23:03:443]: Running product '{48C49ACE-90CF-4161-9C6E-9162115A54DD}' with elevated privileges: Product is assigned.

The original setup was run elevated, but there should be no reason that it requires elevation to run. I'll keep digging to see what I can come up with, but has anyone else run into something similar?

Just for reference, here's the full log from the patch attempt (I cancelled out of the elevation dialog). It's still showing up as Unidentified publisher. I'm testing this on Vista Sp2 BTW:

=== Verbose logging started: 7/2/2009 15:23:02 Build type: SHIP UNICODE 4.05.6002.00 Calling process: C:\Windows\system32\msiexec.exe ===
MSI (c) (24:FC) [15:23:02:929]: Resetting cached policy values
MSI (c) (24:FC) [15:23:02:929]: Machine policy value 'Debug' is 0
MSI (c) (24:FC) [15:23:02:929]: ******* RunEngine:
******* Product: {48C49ACE-90CF-4161-9C6E-9162115A54DD}
******* Action:
******* CommandLine: **********
MSI (c) (24:FC) [15:23:02:936]: Machine policy value 'DisableUserInstalls' is 0
MSI (c) (24:FC) [15:23:02:985]: Cloaking enabled.
MSI (c) (24:FC) [15:23:02:985]: Attempting to enable all disabled privileges before calling Install on Server
MSI (c) (24:FC) [15:23:03:031]: End dialog not enabled
MSI (c) (24:FC) [15:23:03:032]: Original package ==> C:\Windows\Installer\13184ff.msi
MSI (c) (24:FC) [15:23:03:032]: Package we're running from ==> C:\Windows\Installer\13184ff.msi
MSI (c) (24:FC) [15:23:03:035]: APPCOMPAT: looking for appcompat database entry with ProductCode '{48C49ACE-90CF-4161-9C6E-9162115A54DD}'.
MSI (c) (24:FC) [15:23:03:035]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (24:FC) [15:23:03:055]: MSCOREE not loaded loading copy from system32
MSI (c) (24:FC) [15:23:03:070]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (c) (24:FC) [15:23:03:102]: Original patch ==> C:\insttemp\patch.msp
MSI (c) (24:FC) [15:23:03:102]: Patch we're running from ==> C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp
MSI (c) (24:FC) [15:23:03:104]: SOFTWARE RESTRICTION POLICY: Verifying patch --> 'C:\insttemp\patch.msp' against software restriction policy
MSI (c) (24:FC) [15:23:03:104]: SOFTWARE RESTRICTION POLICY: C:\insttemp\patch.msp has a digital signature
MSI (c) (24:FC) [15:23:03:389]: SOFTWARE RESTRICTION POLICY: C:\insttemp\patch.msp is permitted to run at the 'unrestricted' authorization level.
MSI (c) (24:FC) [15:23:03:390]: SequencePatches starts. Product code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}, Product version: 1.0.0, Upgrade code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}, Product language 1033
MSI (c) (24:FC) [15:23:03:391]: Optimizations are not possible in the patch sequencer because there are no applied patches.
MSI (c) (24:FC) [15:23:03:391]: PATCH SEQUENCER: verifying the applicability of QFE patch C:\insttemp\patch.msp against product code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}, product version: 1.0.0, product language 1033 and upgrade code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}
MSI (c) (24:FC) [15:23:03:391]: Validating transform 'RTM.1' with validation bits 0x922
MSI (c) (24:FC) [15:23:03:391]: Transform 'RTM.1' is valid.
MSI (c) (24:FC) [15:23:03:391]: PATCH SEQUENCER: QFE patch C:\insttemp\patch.msp is applicable.
MSI (c) (24:FC) [15:23:03:391]: The original #_QFESequence table:
MSI (c) (24:FC) [15:23:03:391]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} ResultantVersion: 1.0.0 PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 Type: QFE
MSI (c) (24:FC) [15:23:03:391]: The pre-sorted #_QFESequence table: - this is useful to see if patches had been ordered correctly within resultant versions and patch families
MSI (c) (24:FC) [15:23:03:391]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} ResultantVersion: 1.0.0 PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 VersionOrder: 0 SequenceOrder: 0 Type: QFE
MSI (c) (24:FC) [15:23:03:394]: PATCH SEQUENCER: The initial #_Predecessor table:
MSI (c) (24:FC) [15:23:03:394]: PatchFamily: SamplePatchFamily, PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970}, Predecessor GUID: NULL
MSI (c) (24:FC) [15:23:03:394]: PATCH SEQUENCER: Step 1
MSI (c) (24:FC) [15:23:03:394]: PATCH SEQUENCER: patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} (PatchFamily SamplePatchFamily) will be sequenced.
MSI (c) (24:FC) [15:23:03:394]: PATCH SEQUENCER: The resulting #_OrderedGUIDs table:
MSI (c) (24:FC) [15:23:03:394]: Patch: {B8D5A6D2-7CDE-472E-BE10-F72408468970} Order: 0 (Family: SamplePatchFamily)
MSI (c) (24:FC) [15:23:03:394]: The ordered #_QFESequence table: - has the final sequence of QFEs. It lists each PatchGUID only once.
MSI (c) (24:FC) [15:23:03:394]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} ResultantVersion: 1.0.0 PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 Order: 0
MSI (c) (24:FC) [15:23:03:397]: The #_QFESequence table with patches sorted on Sequence within Patch Families:
MSI (c) (24:FC) [15:23:03:398]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 SequenceOrder: 0 Type: QFE
MSI (c) (24:FC) [15:23:03:399]: PATCH SEQUENCER: QFE patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} cannot be superseded because there is no supersedence defined in SamplePatchFamily family yet for this type
MSI (c) (24:FC) [15:23:03:399]: PATCH SEQUENCER: QFE patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} will attempt to supersede in SamplePatchFamily family, starting from sequence 1.0.0.0
MSI (c) (24:FC) [15:23:03:399]: SequencePatches returns success.
MSI (c) (24:FC) [15:23:03:399]: Final Patch Application Order:
MSI (c) (24:FC) [15:23:03:399]: {B8D5A6D2-7CDE-472E-BE10-F72408468970} - C:\insttemp\patch.msp
MSI (c) (24:FC) [15:23:03:399]: Machine policy value 'DisablePatch' is 0
MSI (c) (24:FC) [15:23:03:399]: Machine policy value 'AllowLockdownPatch' is 0
MSI (c) (24:FC) [15:23:03:400]: Machine policy value 'DisableMsi' is 0
MSI (c) (24:FC) [15:23:03:400]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (24:FC) [15:23:03:401]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (24:FC) [15:23:03:402]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is admin assigned: LocalSystem owns the publish key.
MSI (c) (24:FC) [15:23:03:402]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is managed.
MSI (c) (24:FC) [15:23:03:402]: Running product '{48C49ACE-90CF-4161-9C6E-9162115A54DD}' with elevated privileges: Product is assigned.
MSI (c) (24:FC) [15:23:03:402]: Machine policy value 'DisableLUAPatching' is 0
MSI (c) (24:FC) [15:23:03:402]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (c) (24:FC) [15:23:03:402]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (c) (24:FC) [15:23:03:403]: Validating digital signature of file 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp'
MSI (c) (24:FC) [15:23:03:419]: Certificate of signed file 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp' differs in size with the certificate authored in the package
MSI (c) (24:FC) [15:23:03:420]: Turning off patch optimization. {B8D5A6D2-7CDE-472E-BE10-F72408468970} patch is not authored to support it.
MSI (c) (24:FC) [15:23:03:420]: Looking for patch transform: RTM.1
MSI (c) (24:FC) [15:23:03:420]: Validating transform 'RTM.1' with validation bits 0x922
MSI (c) (24:FC) [15:23:03:420]: Transform 'RTM.1' is valid.
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: _Tables 3: -2147287038
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: _Columns 3: -2147287038
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: _Validation 3: -2147287038
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: AdminExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: AdminUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: AdvtExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:420]: Note: 1: 2262 2: Component 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: Directory 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: Feature 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: FeatureComponents 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: File 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: InstallUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: Media 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: Property 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: MsiDigitalCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: MsiPatchCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: _Validation 3: -2147287038
MSI (c) (24:FC) [15:23:03:422]: Note: 1: 2262 2: AdminExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: AdminUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: AdvtExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: Component 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: Directory 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: Feature 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: FeatureComponents 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:423]: Note: 1: 2262 2: InstallUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:424]: Note: 1: 2262 2: MsiDigitalCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:424]: Note: 1: 2262 2: MsiFileHash 3: -2147287038
MSI (c) (24:FC) [15:23:03:424]: Note: 1: 2262 2: MsiPatchCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:424]: Note: 1: 2205 2: 3: Patch
MSI (c) (24:FC) [15:23:03:424]: Note: 1: 2228 2: 3: Patch 4: CREATE TABLE `Patch` ( `File_` CHAR(72) NOT NULL, `Sequence` INTEGER NOT NULL, `PatchSize` LONG NOT NULL, `Attributes` INTEGER NOT NULL, `Header` OBJECT, `StreamRef_` CHAR(72) PRIMARY KEY `File_`, `Sequence` )
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: Patch 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Baseline: Patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} modified SampleFile with full-file update.
MSI (c) (24:FC) [15:23:03:426]: Baseline: First patch for SampleFile, saving native info.
MSI (c) (24:FC) [15:23:03:426]: Baseline: SampleFile version for baseline at patch Native: , , 22.
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2205 2: 3: PatchPackage
MSI (c) (24:FC) [15:23:03:426]: TRANSFORM: 'PatchPackage' table is missing or empty. No pre-transform fixup necessary.
MSI (c) (24:FC) [15:23:03:426]: TRANSFORM: Applying regular transform to database.
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: _Tables 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: _Columns 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: _Validation 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: AdminExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: AdminUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: AdvtExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: Component 3: -2147287038
MSI (c) (24:FC) [15:23:03:426]: Note: 1: 2262 2: Directory 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: Feature 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: FeatureComponents 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: File 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: InstallUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: Media 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: Property 3: -2147287038
MSI (c) (24:FC) [15:23:03:427]: Note: 1: 2262 2: MsiDigitalCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: MsiPatchCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: #_PatchCache 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: #_BaselineData 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: #_BaselineFile 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: #_BaselineCost 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: _MsiPatchAuthorTransformView 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: _MsiPatchPatchTransformView 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: __MsiRegistryList 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: Patch 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Note: 1: 2262 2: __MsiPatchInstallFile 3: -2147287038
MSI (c) (24:FC) [15:23:03:428]: Detected that this is a 'Small Update' patch. Any remaining transforms in the patch will be skipped.
MSI (c) (24:FC) [15:23:03:429]: Note: 1: 2205 2: 3: PatchPackage
MSI (c) (24:FC) [15:23:03:429]: TRANSFORM: The minimum 'Media.DiskId' value inserted by a patch transform is 100
MSI (c) (24:FC) [15:23:03:429]: TRANSFORM: The maximum 'Media.DiskId' value inserted by a patch transform is 99
MSI (c) (24:FC) [15:23:03:429]: TRANSFORM: The minimum 'File.Sequence' or 'Patch.Sequence' value inserted by a patch transform is 10000
MSI (c) (24:FC) [15:23:03:429]: TRANSFORM: The maximum 'File.Sequence' or 'Patch.Sequence' value inserted by a patch transform is 9999.
MSI (c) (24:FC) [15:23:03:429]: TRANSFORM: Applying special patch transform to database.
MSI (c) (24:FC) [15:23:03:429]: Note: 1: 2262 2: _Validation 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: AdminExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: AdminUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: AdvtExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: Component 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: Directory 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: Feature 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: FeatureComponents 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: InstallExecuteSequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:430]: Note: 1: 2262 2: InstallUISequence 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: MsiDigitalCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: MsiFileHash 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: MsiPatchCertificate 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: #_PatchCache 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: #_BaselineData 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: #_BaselineFile 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: #_BaselineCost 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: _MsiPatchPatchTransformView 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: __MsiRegistryList 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: Patch 3: -2147287038
MSI (c) (24:FC) [15:23:03:431]: Note: 1: 2262 2: __MsiPatchInstallFile 3: -2147287038
MSI (c) (24:FC) [15:23:03:432]: Transforming table Media.

MSI (c) (24:FC) [15:23:03:432]: Note: 1: 2262 2: Media 3: -2147287038
MSI (c) (24:FC) [15:23:03:432]: Transforming table Media.

MSI (c) (24:FC) [15:23:03:432]: Note: 1: 2262 2: PatchPackage 3: -2147287038
MSI (c) (24:FC) [15:23:03:432]: Transforming table PatchPackage.

MSI (c) (24:FC) [15:23:03:432]: Note: 1: 2262 2: PatchPackage 3: -2147287038
MSI (c) (24:FC) [15:23:03:432]: Transforming table PatchPackage.

MSI (c) (24:FC) [15:23:03:432]: TRANSFORM: Modifying 'File' and 'Patch' rows added by this patch transform to have appropriate 'Sequence' values. Offsetting values by 4999
MSI (c) (24:FC) [15:23:03:433]: TRANSFORM: Modifying 'PatchPackage' table row added by this patch transform to use 'Media_' value 100.
MSI (c) (24:FC) [15:23:03:433]: TRANSFORM: Modifying 'Media' table row added by this patch transform to use 'DiskId' value 100 and 'Source' values MSPSRCB8D5A6D27CDE472EBE10F72408468970.
MSI (c) (24:FC) [15:23:03:434]: Transforming table MsiFileHash.

MSI (c) (24:FC) [15:23:03:434]: Transforming table MsiFileHash.

MSI (c) (24:FC) [15:23:03:434]: Note: 1: 2262 2: MsiFileHash 3: -2147287038
MSI (c) (24:FC) [15:23:03:434]: Baseline: SampleFile version for baseline at patch {B8D5A6D2-7CDE-472E-BE10-F72408468970}: , , 22.
MSI (c) (24:FC) [15:23:03:435]: APPCOMPAT: looking for appcompat database entry with ProductCode '{48C49ACE-90CF-4161-9C6E-9162115A54DD}'.
MSI (c) (24:FC) [15:23:03:435]: APPCOMPAT: no matching ProductCode found in database.
MSI (c) (24:FC) [15:23:03:436]: Transforms are not secure.
MSI (c) (24:FC) [15:23:03:436]: Transforming table Property.

MSI (c) (24:FC) [15:23:03:436]: Note: 1: 2262 2: Property 3: -2147287038
MSI (c) (24:FC) [15:23:03:436]: Transforming table Property.

MSI (c) (24:FC) [15:23:03:436]: Note: 1: 2205 2: 3: Control
MSI (c) (24:FC) [15:23:03:436]: PROPERTY CHANGE: Adding MsiLogFileLocation property. Its value is 'C:\insttemp\patch.log'.
MSI (c) (24:FC) [15:23:03:436]: Command Line: PATCH=C:\insttemp\patch.msp CURRENTDIRECTORY=C:\insttemp CLIENTUILEVEL=0 CLIENTPROCESSID=2340
MSI (c) (24:FC) [15:23:03:436]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{C29CD4A8-1620-4061-9BC4-97D2EEDED5E9}'.
MSI (c) (24:FC) [15:23:03:436]: Product Code passed to Engine.Initialize: '{48C49ACE-90CF-4161-9C6E-9162115A54DD}'
MSI (c) (24:FC) [15:23:03:436]: Product Code from property table before transforms: '{48C49ACE-90CF-4161-9C6E-9162115A54DD}'
MSI (c) (24:FC) [15:23:03:436]: Product Code from property table after transforms: '{48C49ACE-90CF-4161-9C6E-9162115A54DD}'
MSI (c) (24:FC) [15:23:03:436]: Product registered: entering maintenance mode
MSI (c) (24:FC) [15:23:03:436]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (c) (24:FC) [15:23:03:436]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (c) (24:FC) [15:23:03:439]: Package name retrieved from configuration data: 'product.msi'
MSI (c) (24:FC) [15:23:03:439]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (c) (24:FC) [15:23:03:439]: Note: 1: 2205 2: 3: Error
MSI (c) (24:FC) [15:23:03:443]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (c) (24:FC) [15:23:03:443]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (c) (24:FC) [15:23:03:443]: User policy value 'AlwaysInstallElevated' is 0
MSI (c) (24:FC) [15:23:03:443]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is admin assigned: LocalSystem owns the publish key.
MSI (c) (24:FC) [15:23:03:443]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is managed.
MSI (c) (24:FC) [15:23:03:443]: Running product '{48C49ACE-90CF-4161-9C6E-9162115A54DD}' with elevated privileges: Product is assigned.
MSI (c) (24:FC) [15:23:03:443]: Machine policy value 'EnableUserControl' is 0
MSI (c) (24:FC) [15:23:03:443]: PROPERTY CHANGE: Adding RestrictedUserControl property. Its value is '1'.
MSI (c) (24:FC) [15:23:03:443]: PROPERTY CHANGE: Adding PATCH property. Its value is 'C:\insttemp\patch.msp'.
MSI (c) (24:FC) [15:23:03:443]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'C:\insttemp'.
MSI (c) (24:FC) [15:23:03:443]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '0'.
MSI (c) (24:FC) [15:23:03:443]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2340'.
MSI (c) (24:FC) [15:23:03:444]: TRANSFORMS property is now:
MSI (c) (24:FC) [15:23:03:444]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
MSI (c) (24:FC) [15:23:03:444]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '300'.
MSI (c) (24:FC) [15:23:03:445]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming
MSI (c) (24:FC) [15:23:03:446]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\Favorites
MSI (c) (24:FC) [15:23:03:446]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts
MSI (c) (24:FC) [15:23:03:446]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\Documents
MSI (c) (24:FC) [15:23:03:448]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts
MSI (c) (24:FC) [15:23:03:450]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Recent
MSI (c) (24:FC) [15:23:03:451]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\SendTo
MSI (c) (24:FC) [15:23:03:451]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Templates
MSI (c) (24:FC) [15:23:03:451]: SHELL32::SHGetFolderPath returned: C:\ProgramData
MSI (c) (24:FC) [15:23:03:452]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Local
MSI (c) (24:FC) [15:23:03:452]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\Pictures
MSI (c) (24:FC) [15:23:03:453]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (24:FC) [15:23:03:453]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (24:FC) [15:23:03:453]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu\Programs
MSI (c) (24:FC) [15:23:03:453]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Start Menu
MSI (c) (24:FC) [15:23:03:456]: SHELL32::SHGetFolderPath returned: C:\Users\Public\Desktop
MSI (c) (24:FC) [15:23:03:456]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
MSI (c) (24:FC) [15:23:03:457]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
MSI (c) (24:FC) [15:23:03:458]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
MSI (c) (24:FC) [15:23:03:458]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Start Menu
MSI (c) (24:FC) [15:23:03:458]: SHELL32::SHGetFolderPath returned: C:\Users\StandardUser\Desktop
MSI (c) (24:FC) [15:23:03:459]: SHELL32::SHGetFolderPath returned: C:\ProgramData\Microsoft\Windows\Templates
MSI (c) (24:FC) [15:23:03:461]: SHELL32::SHGetFolderPath returned: C:\Windows\Fonts
MSI (c) (24:FC) [15:23:03:462]: Note: 1: 2898 2: MS Sans Serif 3: MS Sans Serif 4: 0 5: 16
MSI (c) (24:FC) [15:23:03:480]: MSI_LUA: Setting AdminUser property to 1 because this is the client or the user has already permitted elevation
MSI (c) (24:FC) [15:23:03:480]: PROPERTY CHANGE: Adding AdminUser property. Its value is '1'.
MSI (c) (24:FC) [15:23:03:480]: MSI_LUA: Setting MsiRunningElevated property to 1 because the install is already running elevated.
MSI (c) (24:FC) [15:23:03:480]: PROPERTY CHANGE: Adding MsiRunningElevated property. Its value is '1'.
MSI (c) (24:FC) [15:23:03:480]: PROPERTY CHANGE: Adding Privileged property. Its value is '1'.
MSI (c) (24:FC) [15:23:03:480]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (24:FC) [15:23:03:480]: PROPERTY CHANGE: Adding USERNAME property. Its value is 'AdminUser'.
MSI (c) (24:FC) [15:23:03:480]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\MS Setup (ACME)\User Info 3: 2
MSI (c) (24:FC) [15:23:03:481]: PROPERTY CHANGE: Adding Installed property. Its value is '00:00:00'.
MSI (c) (24:FC) [15:23:03:481]: PROPERTY CHANGE: Adding DATABASE property. Its value is 'C:\Windows\Installer\13184ff.msi'.
MSI (c) (24:FC) [15:23:03:481]: PROPERTY CHANGE: Adding OriginalDatabase property. Its value is 'C:\Windows\Installer\13184ff.msi'.
MSI (c) (24:FC) [15:23:03:481]: Machine policy value 'MsiDisableEmbeddedUI' is 0
MSI (c) (24:A0) [15:23:03:485]: PROPERTY CHANGE: Adding VersionHandler property. Its value is '4.05'.
MSI (c) (24:A0) [15:23:03:485]: Note: 1: 2205 2: 3: ControlEvent
MSI (c) (24:A0) [15:23:03:485]: Note: 1: 2205 2: 3: ControlCondition
MSI (c) (24:A0) [15:23:03:485]: Note: 1: 2205 2: 3: EventMapping
MSI (c) (24:A0) [15:23:03:485]: Note: 1: 2205 2: 3: UIText
MSI (c) (24:A0) [15:23:03:485]: Note: 1: 2205 2: 3: TextStyle
MSI (c) (24:A0) [15:23:03:494]: Note: 1: 2205 2: 3: Dialog
=== Logging started: 7/2/2009 15:23:03 ===
MSI (c) (24:FC) [15:23:03:499]: PROPERTY CHANGE: Adding MSPSRCB8D5A6D27CDE472EBE10F72408468970 property. Its value is 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp'.
MSI (c) (24:FC) [15:23:03:499]: PROPERTY CHANGE: Adding _B8D5A6D27CDE472EBE10F72408468970 property. Its value is 'C:\insttemp\patch.msp'.
MSI (c) (24:FC) [15:23:03:499]: Machine policy value 'DisableRollback' is 0
MSI (c) (24:FC) [15:23:03:499]: User policy value 'DisableRollback' is 0
MSI (c) (24:FC) [15:23:03:499]: PROPERTY CHANGE: Adding UILevel property. Its value is '5'.
MSI (c) (24:FC) [15:23:03:499]: PROPERTY CHANGE: Adding QFEUpgrade property. Its value is '2'.
MSI (c) (24:FC) [15:23:03:504]: PROPERTY CHANGE: Adding ACTION property. Its value is 'INSTALL'.
MSI (c) (24:FC) [15:23:03:504]: Doing action: INSTALL
MSI (c) (24:FC) [15:23:03:504]: Note: 1: 2205 2: 3: ActionText
Action 15:23:03: INSTALL.
Action start 15:23:03: INSTALL.
MSI (c) (24:FC) [15:23:03:541]: UI Sequence table 'InstallUISequence' is present and populated.
MSI (c) (24:FC) [15:23:03:541]: Running UISequence
MSI (c) (24:FC) [15:23:03:541]: PROPERTY CHANGE: Adding EXECUTEACTION property. Its value is 'INSTALL'.
MSI (c) (24:FC) [15:23:03:541]: Doing action: ValidateProductID
MSI (c) (24:FC) [15:23:03:541]: Note: 1: 2205 2: 3: ActionText
Action 15:23:03: ValidateProductID.
Action start 15:23:03: ValidateProductID.
Action ended 15:23:03: ValidateProductID. Return value 1.
MSI (c) (24:FC) [15:23:03:548]: Doing action: CostInitialize
MSI (c) (24:FC) [15:23:03:548]: Note: 1: 2205 2: 3: ActionText
Action 15:23:03: CostInitialize. Computing space requirements
Action start 15:23:03: CostInitialize.
MSI (c) (24:FC) [15:23:03:552]: Machine policy value 'MaxPatchCacheSize' is 10
MSI (c) (24:FC) [15:23:03:552]: Baseline: Sorting baselines for {48C49ACE-90CF-4161-9C6E-9162115A54DD}.
MSI (c) (24:FC) [15:23:03:552]: Baseline: New baseline 1.0.0 from transaction.
MSI (c) (24:FC) [15:23:03:552]: Baseline: Sorted order Native: Order 0.
MSI (c) (24:FC) [15:23:03:552]: RTM Baseline: 1.0.0
MSI (c) (24:FC) [15:23:03:552]: Baseline Data Table:
MSI (c) (24:FC) [15:23:03:552]: ProductCode: {48C49ACE-90CF-4161-9C6E-9162115A54DD} Version: 1.0.0 Attributes: 1 PatchId: Native BaselineId: 0 Order: 0
MSI (c) (24:FC) [15:23:03:552]: Baseline File Table:
MSI (c) (24:FC) [15:23:03:552]: {B8D5A6D2-7CDE-472E-BE10-F72408468970} File: SampleFile ValData: 22
MSI (c) (24:FC) [15:23:03:552]: Native File: SampleFile ValData: 22
MSI (c) (24:FC) [15:23:03:560]: PROPERTY CHANGE: Adding ROOTDRIVE property. Its value is 'C:\'.
MSI (c) (24:FC) [15:23:03:561]: PROPERTY CHANGE: Adding CostingComplete property. Its value is '0'.
Action ended 15:23:03: CostInitialize. Return value 1.
MSI (c) (24:FC) [15:23:03:563]: Doing action: FileCost
MSI (c) (24:FC) [15:23:03:563]: Note: 1: 2205 2: 3: ActionText
Action 15:23:03: FileCost. Computing space requirements
Action start 15:23:03: FileCost.
MSI (c) (24:FC) [15:23:03:568]: Note: 1: 2205 2: 3: MsiAssembly
MSI (c) (24:FC) [15:23:03:568]: Note: 1: 2205 2: 3: Registry
MSI (c) (24:FC) [15:23:03:568]: Note: 1: 2205 2: 3: Registry
MSI (c) (24:FC) [15:23:03:568]: Note: 1: 2205 2: 3: Class
MSI (c) (24:FC) [15:23:03:568]: Note: 1: 2205 2: 3: Extension
MSI (c) (24:FC) [15:23:03:568]: Note: 1: 2205 2: 3: TypeLib
Action ended 15:23:03: FileCost. Return value 1.
MSI (c) (24:FC) [15:23:03:569]: Doing action: CostFinalize
MSI (c) (24:FC) [15:23:03:569]: Note: 1: 2205 2: 3: ActionText
Action 15:23:03: CostFinalize. Computing space requirements
Action start 15:23:03: CostFinalize.
MSI (c) (24:FC) [15:23:03:575]: PROPERTY CHANGE: Adding OutOfDiskSpace property. Its value is '0'.
MSI (c) (24:FC) [15:23:03:575]: PROPERTY CHANGE: Adding OutOfNoRbDiskSpace property. Its value is '0'.
MSI (c) (24:FC) [15:23:03:575]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceAvailable property. Its value is '0'.
MSI (c) (24:FC) [15:23:03:575]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRequired property. Its value is '0'.
MSI (c) (24:FC) [15:23:03:575]: PROPERTY CHANGE: Adding PrimaryVolumeSpaceRemaining property. Its value is '0'.
MSI (c) (24:FC) [15:23:03:576]: Note: 1: 2205 2: 3: MsiAssembly
MSI (c) (24:FC) [15:23:03:576]: Note: 1: 2228 2: 3: MsiAssembly 4: SELECT `MsiAssembly`.`Attributes`, `MsiAssembly`.`File_Application`, `MsiAssembly`.`File_Manifest`, `Component`.`KeyPath` FROM `MsiAssembly`, `Component` WHERE `MsiAssembly`.`Component_` = `Component`.`Component` AND `MsiAssembly`.`Component_` = ?
MSI (c) (24:FC) [15:23:03:576]: PROPERTY CHANGE: Adding SampleProductFolder property. Its value is 'C:\Program Files\Patch Sample Directory'.
MSI (c) (24:FC) [15:23:03:576]: Note: 1: 2205 2: 3: Condition
MSI (c) (24:FC) [15:23:03:577]: Machine policy value 'EnforceUpgradeComponentRules' is 0
MSI (c) (24:FC) [15:23:03:579]: PROPERTY CHANGE: Adding TARGETDIR property. Its value is 'C:\'.
MSI (c) (24:FC) [15:23:03:579]: PROPERTY CHANGE: Modifying SampleProductFolder property. Its current value is 'C:\Program Files\Patch Sample Directory'. Its new value: 'C:\Program Files\Patch Sample Directory\'.
MSI (c) (24:FC) [15:23:03:579]: Target path resolution complete. Dumping Directory table...
MSI (c) (24:FC) [15:23:03:579]: Note: target paths subject to change (via custom actions or browsing)
MSI (c) (24:FC) [15:23:03:579]: Dir (target): Key: TARGETDIR , Object: C:\
MSI (c) (24:FC) [15:23:03:579]: Dir (target): Key: WindowsFolder , Object: C:\Windows\
MSI (c) (24:FC) [15:23:03:579]: Dir (target): Key: ProgramFilesFolder , Object: C:\Program Files\
MSI (c) (24:FC) [15:23:03:580]: Dir (target): Key: SampleProductFolder , Object: C:\Program Files\Patch Sample Directory\
MSI (c) (24:FC) [15:23:03:581]: PROPERTY CHANGE: Adding REINSTALL property. Its value is 'SampleProductFeature'.
MSI (c) (24:FC) [15:23:03:581]: PROPERTY CHANGE: Adding INSTALLLEVEL property. Its value is '1'.
Action ended 15:23:03: CostFinalize. Return value 1.
MSI (c) (24:FC) [15:23:03:596]: Doing action: ExecuteAction
MSI (c) (24:FC) [15:23:03:596]: Note: 1: 2205 2: 3: ActionText
Action 15:23:03: ExecuteAction.
Action start 15:23:03: ExecuteAction.
MSI (c) (24:FC) [15:23:03:603]: PROPERTY CHANGE: Adding SECONDSEQUENCE property. Its value is '1'.
MSI (c) (24:FC) [15:23:03:603]: Grabbed execution mutex.
MSI (c) (24:FC) [15:23:03:603]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (c) (24:FC) [15:23:03:605]: Transforming table Property.

MSI (c) (24:FC) [15:23:03:605]: Note: 1: 2262 2: Property 3: -2147287038
MSI (c) (24:FC) [15:23:03:605]: Transforming table Property.

MSI (c) (24:FC) [15:23:03:605]: Switching to server: TARGETDIR="C:\" CLIENTUILEVEL="0" PRODUCTLANGUAGE="1033" MSPSRCB8D5A6D27CDE472EBE10F72408468970="C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp" CLIENTPROCESSID="2340" PATCH="C:\insttemp\patch.msp" CURRENTDIRECTORY="C:\insttemp" _B8D5A6D27CDE472EBE10F72408468970="C:\insttemp\patch.msp" USERNAME="AdminUser" ROOTDRIVE="C:\" EXECUTEACTION="INSTALL" ACTION="INSTALL" INSTALLLEVEL="1" SECONDSEQUENCE="1" REINSTALL=SampleProductFeature
MSI (s) (78:10) [15:23:03:631]: Running installation inside multi-package transaction C:\Windows\Installer\13184ff.msi
MSI (s) (78:10) [15:23:03:631]: Grabbed execution mutex.
MSI (s) (78:1C) [15:23:03:641]: Resetting cached policy values
MSI (s) (78:1C) [15:23:03:642]: Machine policy value 'Debug' is 0
MSI (s) (78:1C) [15:23:03:642]: ******* RunEngine:
******* Product: C:\Windows\Installer\13184ff.msi
******* Action: INSTALL
******* CommandLine: **********
MSI (s) (78:1C) [15:23:03:643]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (78:1C) [15:23:03:645]: Setting cached product context: machine assigned for product: 30AC997E64E77EA47A6B9E40CCDF5192
MSI (s) (78:1C) [15:23:03:645]: Using cached product context: machine assigned for product: 30AC997E64E77EA47A6B9E40CCDF5192
MSI (s) (78:1C) [15:23:03:645]: Setting cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:645]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:683]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:683]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:684]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:686]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:686]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:686]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:686]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:686]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:686]: Machine policy value 'LimitSystemRestoreCheckpointing' is 0
MSI (s) (78:1C) [15:23:03:686]: SRSetRestorePoint skipped for this transaction.
MSI (s) (78:1C) [15:23:03:687]: End dialog not enabled
MSI (s) (78:1C) [15:23:03:687]: Original package ==> C:\Windows\Installer\13184ff.msi
MSI (s) (78:1C) [15:23:03:687]: Package we're running from ==> C:\Windows\Installer\13184ff.msi
MSI (s) (78:1C) [15:23:03:688]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:688]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:689]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:689]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:690]: APPCOMPAT: looking for appcompat database entry with ProductCode '{48C49ACE-90CF-4161-9C6E-9162115A54DD}'.
MSI (s) (78:1C) [15:23:03:690]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (78:1C) [15:23:03:690]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:691]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:692]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:692]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:692]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:703]: MSCOREE not loaded loading copy from system32
MSI (s) (78:1C) [15:23:03:720]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:720]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:720]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:722]: Note: 1: 1402 2: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 3: 2
MSI (s) (78:1C) [15:23:03:730]: File will have security applied from OpCode.
MSI (s) (78:1C) [15:23:03:760]: Original patch ==> C:\insttemp\patch.msp
MSI (s) (78:1C) [15:23:03:760]: Patch we're running from ==> C:\Windows\Installer\1318500.msp
MSI (s) (78:1C) [15:23:03:761]: SOFTWARE RESTRICTION POLICY: Verifying patch --> 'C:\insttemp\patch.msp' against software restriction policy
MSI (s) (78:1C) [15:23:03:761]: SOFTWARE RESTRICTION POLICY: C:\insttemp\patch.msp has a digital signature
MSI (s) (78:1C) [15:23:03:802]: SOFTWARE RESTRICTION POLICY: C:\insttemp\patch.msp is permitted to run at the 'unrestricted' authorization level.
MSI (s) (78:1C) [15:23:03:803]: SequencePatches starts. Product code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}, Product version: 1.0.0, Upgrade code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}, Product language 1033
MSI (s) (78:1C) [15:23:03:803]: Optimizations are not possible in the patch sequencer because there are no applied patches.
MSI (s) (78:1C) [15:23:03:803]: PATCH SEQUENCER: verifying the applicability of QFE patch C:\insttemp\patch.msp against product code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}, product version: 1.0.0, product language 1033 and upgrade code: {48C49ACE-90CF-4161-9C6E-9162115A54DD}
MSI (s) (78:1C) [15:23:03:803]: Validating transform 'RTM.1' with validation bits 0x922
MSI (s) (78:1C) [15:23:03:803]: Transform 'RTM.1' is valid.
MSI (s) (78:1C) [15:23:03:803]: PATCH SEQUENCER: QFE patch C:\insttemp\patch.msp is applicable.
MSI (s) (78:1C) [15:23:03:804]: The original #_QFESequence table:
MSI (s) (78:1C) [15:23:03:804]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} ResultantVersion: 1.0.0 PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 Type: QFE
MSI (s) (78:1C) [15:23:03:804]: The pre-sorted #_QFESequence table: - this is useful to see if patches had been ordered correctly within resultant versions and patch families
MSI (s) (78:1C) [15:23:03:804]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} ResultantVersion: 1.0.0 PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 VersionOrder: 0 SequenceOrder: 0 Type: QFE
MSI (s) (78:1C) [15:23:03:804]: PATCH SEQUENCER: The initial #_Predecessor table:
MSI (s) (78:1C) [15:23:03:806]: PatchFamily: SamplePatchFamily, PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970}, Predecessor GUID: NULL
MSI (s) (78:1C) [15:23:03:806]: PATCH SEQUENCER: Step 1
MSI (s) (78:1C) [15:23:03:806]: PATCH SEQUENCER: patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} (PatchFamily SamplePatchFamily) will be sequenced.
MSI (s) (78:1C) [15:23:03:806]: PATCH SEQUENCER: The resulting #_OrderedGUIDs table:
MSI (s) (78:1C) [15:23:03:806]: Patch: {B8D5A6D2-7CDE-472E-BE10-F72408468970} Order: 0 (Family: SamplePatchFamily)
MSI (s) (78:1C) [15:23:03:806]: The ordered #_QFESequence table: - has the final sequence of QFEs. It lists each PatchGUID only once.
MSI (s) (78:1C) [15:23:03:806]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} ResultantVersion: 1.0.0 PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 Order: 0
MSI (s) (78:1C) [15:23:03:807]: The #_QFESequence table with patches sorted on Sequence within Patch Families:
MSI (s) (78:1C) [15:23:03:807]: PatchGUID: {B8D5A6D2-7CDE-472E-BE10-F72408468970} PatchFamily: SamplePatchFamily Sequence: 1.0.0.0 SequenceOrder: 0 Type: QFE
MSI (s) (78:1C) [15:23:03:807]: PATCH SEQUENCER: QFE patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} cannot be superseded because there is no supersedence defined in SamplePatchFamily family yet for this type
MSI (s) (78:1C) [15:23:03:807]: PATCH SEQUENCER: QFE patch {B8D5A6D2-7CDE-472E-BE10-F72408468970} will attempt to supersede in SamplePatchFamily family, starting from sequence 1.0.0.0
MSI (s) (78:1C) [15:23:03:807]: SequencePatches returns success.
MSI (s) (78:1C) [15:23:03:807]: Final Patch Application Order:
MSI (s) (78:1C) [15:23:03:807]: {B8D5A6D2-7CDE-472E-BE10-F72408468970} - C:\insttemp\patch.msp
MSI (s) (78:1C) [15:23:03:807]: Machine policy value 'DisablePatch' is 0
MSI (s) (78:1C) [15:23:03:807]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (78:1C) [15:23:03:807]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:809]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:810]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:810]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:810]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:810]: Machine policy value 'DisableMsi' is 0
MSI (s) (78:1C) [15:23:03:810]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (78:1C) [15:23:03:810]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (78:1C) [15:23:03:810]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:810]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is admin assigned: LocalSystem owns the publish key.
MSI (s) (78:1C) [15:23:03:810]: Product {48C49ACE-90CF-4161-9C6E-9162115A54DD} is managed.
MSI (s) (78:1C) [15:23:03:810]: Running product '{48C49ACE-90CF-4161-9C6E-9162115A54DD}' with elevated privileges: Product is assigned.
MSI (s) (78:1C) [15:23:03:810]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (78:1C) [15:23:03:810]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:811]: Using cached product context: machine assigned for product: ECA94C84FC091614C9E6192611A545DD
MSI (s) (78:1C) [15:23:03:811]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (78:1C) [15:23:03:811]: Enabling baseline caching for this transaction since all active patches are MSI 3.0 style MSPs or at least one MSI 3.0 minor update patch is active
MSI (s) (78:1C) [15:23:03:811]: Validating digital signature of file 'C:\Windows\Installer\1318500.msp'
MSI (s) (78:1C) [15:23:03:830]: Certificate of signed file 'C:\Windows\Installer\1318500.msp' differs in size with the certificate authored in the package
MSI (s) (78:1C) [15:23:03:832]: MSI_LUA: Entering Credential Request. hwnd = 197338, MsiAction = 2, productname = WiX Patch Example Product, version = 1.0.0, language = 1033, manufacturer = Dynamo Corporation
MSI (s) (78:1C) [15:23:03:832]: MSI_LUA: (continued)... packagepath = , packagesource = , dwUpdates = 1
MSI (s) (78:1C) [15:23:03:832]: MSI_LUA: (continued)... update 0 = C:\Windows\Installer\1318500.msp
MSI (s) (78:1C) [15:23:03:832]: MSI_LUA: (continued)... update source 0 = C:\insttemp\patch.msp
MSI (s) (78:1C) [15:23:09:617]: MSI_LUA: Credential Request return = 0x800704C7
This installation is forbidden by system policy. Contact your system administrator.
C:\Windows\Installer\13184ff.msi
MSI (s) (78:1C) [15:23:09:749]: Attempting to delete file C:\Windows\Installer\1318500.msp
MSI (s) (78:1C) [15:23:09:756]: MainEngineThread is returning 1625
MSI (s) (78:10) [15:23:09:763]: No System Restore sequence number for this installation.
MSI (s) (78:10) [15:23:09:767]: User policy value 'DisableRollback' is 0
MSI (s) (78:10) [15:23:09:767]: Machine policy value 'DisableRollback' is 0
MSI (s) (78:10) [15:23:09:770]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (78:10) [15:23:09:775]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (78:10) [15:23:09:779]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\Rollback\Scripts 3: 2
MSI (s) (78:10) [15:23:09:786]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (78:10) [15:23:09:789]: Note: 1: 1402 2: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Installer\InProgress 3: 2
MSI (s) (78:10) [15:23:09:789]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (s) (78:10) [15:23:09:789]: Restoring environment variables
MSI (c) (24:FC) [15:23:09:820]: Back from server. Return value: 1625
MSI (c) (24:FC) [15:23:09:827]: Decrementing counter to disable shutdown. If counter >= 0, shutdown will be denied. Counter after decrement: -1
MSI (c) (24:FC) [15:23:09:832]: PROPERTY CHANGE: Deleting SECONDSEQUENCE property. Its current value is '1'.
Action ended 15:23:09: ExecuteAction. Return value 9.
Action ended 15:23:09: INSTALL. Return value 9.
Property(C): SampleProductFolder = C:\Program Files\Patch Sample Directory\
Property(C): ProgramFilesFolder = C:\Program Files\
Property(C): TARGETDIR = C:\
Property(C): Manufacturer = Dynamo Corporation
Property(C): ProductCode = {48C49ACE-90CF-4161-9C6E-9162115A54DD}
Property(C): ProductLanguage = 1033
Property(C): ProductName = WiX Patch Example Product
Property(C): ProductVersion = 1.0.0
Property(C): UpgradeCode = {48C49ACE-90CF-4161-9C6E-9162115A54DD}
Property(C): ALLUSERS = 1
Property(C): ProductToBeRegistered = 1
Property(C): RestrictedUserControl = 1
Property(C): CLIENTUILEVEL = 0
Property(C): PackageCode = {C29CD4A8-1620-4061-9BC4-97D2EEDED5E9}
Property(C): PRODUCTLANGUAGE = 1033
Property(C): MSPSRCB8D5A6D27CDE472EBE10F72408468970 = C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp
Property(C): VersionDatabase = 300
Property(C): CLIENTPROCESSID = 2340
Property(C): MsiLogFileLocation = C:\insttemp\patch.log
Property(C): ProductState = 5
Property(C): PATCH = C:\insttemp\patch.msp
Property(C): CURRENTDIRECTORY = C:\insttemp
Property(C): _B8D5A6D27CDE472EBE10F72408468970 = C:\insttemp\patch.msp
Property(C): _B8D5A6D27CDE472EBE10F72408468970.AllowRemoval = 1
Property(C): _B8D5A6D27CDE472EBE10F72408468970.PatchCode = {B8D5A6D2-7CDE-472E-BE10-F72408468970}
Property(C): PATCHNEWPACKAGECODE = {B8D5A6D2-7CDE-472E-BE10-F72408468970}
Property(C): PATCHNEWSUMMARYCOMMENTS = This patch contains the logic and data required to install Sample Patch
Property(C): PATCHNEWSUMMARYSUBJECT = Small Update Patch
Property(C): VersionMsi = 4.05
Property(C): VersionNT = 600
Property(C): WindowsBuild = 6002
Property(C): ServicePackLevel = 2
Property(C): ServicePackLevelMinor = 0
Property(C): MsiNTProductType = 1
Property(C): WindowsFolder = C:\Windows\
Property(C): WindowsVolume = C:\
Property(C): SystemFolder = C:\Windows\system32\
Property(C): System16Folder = C:\Windows\system\
Property(C): RemoteAdminTS = 1
Property(C): TempFolder = C:\Users\STANDA~1\AppData\Local\Temp\
Property(C): CommonFilesFolder = C:\Program Files\Common Files\
Property(C): AppDataFolder = C:\Users\StandardUser\AppData\Roaming\
Property(C): FavoritesFolder = C:\Users\StandardUser\Favorites\
Property(C): NetHoodFolder = C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Network Shortcuts\
Property(C): PersonalFolder = C:\Users\StandardUser\Documents\
Property(C): PrintHoodFolder = C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Printer Shortcuts\
Property(C): RecentFolder = C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\Recent\
Property(C): SendToFolder = C:\Users\StandardUser\AppData\Roaming\Microsoft\Windows\SendTo\
Property(C): TemplateFolder = C:\ProgramData\Microsoft\Windows\Templates\
Property(C): CommonAppDataFolder = C:\ProgramData\
Property(C): LocalAppDataFolder = C:\Users\StandardUser\AppData\Local\
Property(C): MyPicturesFolder = C:\Users\StandardUser\Pictures\
Property(C): AdminToolsFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\
Property(C): StartupFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\
Property(C): ProgramMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
Property(C): StartMenuFolder = C:\ProgramData\Microsoft\Windows\Start Menu\
Property(C): DesktopFolder = C:\Users\Public\Desktop\
Property(C): FontsFolder = C:\Windows\Fonts\
Property(C): GPTSupport = 1
Property(C): OLEAdvtSupport = 1
Property(C): ShellAdvtSupport = 1
Property(C): Intel = 15
Property(C): PhysicalMemory = 512
Property(C): VirtualMemory = 972
Property(C): LogonUser = StandardUser
Property(C): UserSID = S-1-5-21-920529065-1412066069-3932276102-1001
Property(C): UserLanguageID = 1033
Property(C): ComputerName = VISTASP2
Property(C): SystemLanguageID = 1033
Property(C): ScreenX = 896
Property(C): ScreenY = 797
Property(C): CaptionHeight = 20
Property(C): BorderTop = 1
Property(C): BorderSide = 1
Property(C): TextHeight = 16
Property(C): TextInternalLeading = 3
Property(C): ColorBits = 32
Property(C): TTCSupport = 1
Property(C): Time = 15:23:09
Property(C): Date = 7/2/2009
Property(C): MsiNetAssemblySupport = 2.0.50727.4016
Property(C): MsiWin32AssemblySupport = 6.0.6001.18000
Property(C): RedirectedDllSupport = 2
Property(C): AdminUser = 1
Property(C): MsiRunningElevated = 1
Property(C): Privileged = 1
Property(C): USERNAME = AdminUser
Property(C): Installed = 00:00:00
Property(C): DATABASE = C:\Windows\Installer\13184ff.msi
Property(C): OriginalDatabase = C:\Windows\Installer\13184ff.msi
Property(C): VersionHandler = 4.05
Property(C): ROOTDRIVE = C:\
Property(C): EXECUTEACTION = INSTALL
Property(C): ACTION = INSTALL
Property(C): QFEUpgrade = 2
Property(C): UILevel = 5
Property(C): CostingComplete = 0
Property(C): OutOfDiskSpace = 0
Property(C): OutOfNoRbDiskSpace = 0
Property(C): PrimaryVolumeSpaceAvailable = 0
Property(C): PrimaryVolumeSpaceRequired = 0
Property(C): PrimaryVolumeSpaceRemaining = 0
Property(C): REINSTALL = SampleProductFeature
Property(C): INSTALLLEVEL = 1
=== Logging stopped: 7/2/2009 15:23:09 ===
MSI (c) (24:FC) [15:23:09:989]: Windows Installer reconfigured the product. Product Name: WiX Patch Example Product. Product Version: 1.0.0. Product Language: 1033. Reconfiguration success or error status: 1625.

MSI (c) (24:FC) [15:23:09:993]: Attempting to delete file C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp
MSI (c) (24:FC) [15:23:09:997]: Grabbed execution mutex.
MSI (c) (24:FC) [15:23:09:997]: Cleaning up uninstalled install packages, if any exist
MSI (c) (24:FC) [15:23:10:002]: Attempting to delete file C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp
MSI (c) (24:FC) [15:23:10:005]: Unable to delete the file outside of the engine. LastError = 2
MSI (c) (24:FC) [15:23:10:009]: MainEngineThread is returning 1625
=== Verbose logging stopped: 7/2/2009 15:23:10 ===

-----Original Message-----
From: Rafael Rivera [mailto:[hidden email]]
Sent: Thursday, July 02, 2009 3:17 PM
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] Patching a product without elevation

Chris,

Those elements appear to simply identify what certificate should be
given the green light for patching. I believe you still need to
digitally sign the resulting MSI using signtool.exe.

- Rafael

Chris Bardon wrote:

Rafael Rivera

Re: Patching a product without elevation

Reply Threaded

MSI (c) (24:FC) [15:23:03:419]: Certificate of signed file 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp' differs in size with the certificate authored in the package

How did you generate your .cer?

- Rafael

Chris Bardon wrote:

> I did run signtool against the packages, with the command lines in the first part of the post.
>
> I also forgot to point out a couple of other changes to the demo code. I changed the installer version to 300, and I set ALLUSERS to 1 to make sure that I installed per-machine to start with.
>
> Something strange that I noticed in the patch log:
>
> [snipped]
>
>
> -----Original Message-----
> From: Rafael Rivera [mailto:[hidden email]]
> Sent: Thursday, July 02, 2009 3:17 PM
> To: General discussion for Windows Installer XML toolset.
> Subject: Re: [WiX-users] Patching a product without elevation
>
> Chris,
>
> Those elements appear to simply identify what certificate should be
> given the green light for patching. I believe you still need to
> digitally sign the resulting MSI using signtool.exe.
>
> - Rafael
>
> Chris Bardon wrote:
>
>> My goal for getting patching to work is to be able to deploy an application that can be patched by a non-admin user, but I'm running into a problem. I've created the patching sample in the documentation, and the patch works when it's elevated, but whether or not it's signed, the patch is still prompting for elevation. I'm signing both the patch and the original MSI with this command lines:
>>
>> signtool.exe sign /f signcert.pfx /p 288 /d "Patch Test application!" product.msi
>> signtool.exe sign /f signcert.pfx /p 288 /d "Patch Test application!" patch.msp
>>
>> I've also modified the product msi from the example so that it includes this markup:
>>
>> <PatchCertificates>
>> <DigitalCertificate SourceFile="signcert.cer" Id="signcert"/>
>> </PatchCertificates>
>>
>> If I look at the properties of the files, both of them have a digital signature from the same certificate, and both are identified as valid. When I run the patch as a non-administrator though, I get an elevation prompt asking to install from an unknown publisher-the original installer correctly identified my certificate. Is there something else I'm missing? I saw the article in MSDN here (http://msdn.microsoft.com/en-us/library/aa372388%28VS.85%29.aspx), which pointed me to the MsiPatchCcertificate table and the PatchCertificates element. I've tried adding the cert both as the pfx file and as a base-64 encoded cer with the same effect. Is there something else that I'm missing here? Why is the patch still reporting itself as an unknown publisher?
>>
>> Thanks for the help everyone,
>>
>> Chris
>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> WiX-users mailing list
>> [hidden email]
>> https://lists.sourceforge.net/lists/listinfo/wix-users
>>
>>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> WiX-users mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>
>
>
> ------------------------------------------------------------------------------
> _______________________________________________
> WiX-users mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/wix-users
>

Chris Bardon-2

Re: Patching a product without elevation

Reply Threaded

I used a CA on windows server 03 to create a code signing certificate (through the web enrollment tool), installed the cert to my dev machine's store, then exported from the store twice. Once to generate the PFX I used for signing, and then once for the .cer file I included in the msi.

________________________________________
From: Rafael Rivera [[hidden email]]
Sent: Thursday, July 02, 2009 4:03 PM
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] Patching a product without elevation

MSI (c) (24:FC) [15:23:03:419]: Certificate of signed file 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp' differs in size with the certificate authored in the package

How did you generate your .cer?

- Rafael

Chris Bardon wrote:

Chris Bardon-2

Re: Patching a product without elevation

Reply Threaded

I've tried a couple of other things here, but with no luck yet. Signing with the sha1 hash from the store had no effect (which I sort of expected). I checked the certificates again though, and I noticed something strange. The .cer file that I'm including in the msi has exactly the same properties as the certificate that's attached to the msi and msp files after running signtool, but the cert on the msi and msp has a new field in the Details tab for Extended Error Information (Revocation Status : OK. Effective Date <‎Wednesday, ‎July ‎01, ‎2009 9:18:18 AM> Next Update <‎Wednesday, ‎July ‎08, ‎2009 9:38:18 PM>) (Right click on the MSI, go to the Digital Signatures tab, and then view the certificate). This appears to have been added by the signing tool. I tried exporting this certificate from the file as another .cer, but then this field was missing, so something strange is going on here.

This might be a dead end, but right now it's the only thing I can see that's different between the two certs. Does anyone have any other ideas why I'm getting this msi error:

MSI (c) (24:FC) [15:23:03:419]: Certificate of signed file 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp' differs in size with the certificate authored in the package

-----Original Message-----
From: Chris Bardon [mailto:[hidden email]]
Sent: Thursday, July 02, 2009 5:48 PM
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] Patching a product without elevation

I used a CA on windows server 03 to create a code signing certificate (through the web enrollment tool), installed the cert to my dev machine's store, then exported from the store twice. Once to generate the PFX I used for signing, and then once for the .cer file I included in the msi.

________________________________________
From: Rafael Rivera [[hidden email]]
Sent: Thursday, July 02, 2009 4:03 PM
To: General discussion for Windows Installer XML toolset.
Subject: Re: [WiX-users] Patching a product without elevation

MSI (c) (24:FC) [15:23:03:419]: Certificate of signed file 'C:\Users\STANDA~1\AppData\Local\Temp\13f7987.msp' differs in size with the certificate authored in the package

How did you generate your .cer?

- Rafael

Chris Bardon wrote:

------------------------------------------------------------------------------
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users

------------------------------------------------------------------------------
_______________________________________________
WiX-users mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/wix-users