Unable to install Patch because of cryptographic service

  • Thread starter Thread starter Dan Oltersdorf
  • Start date Start date
D

Dan Oltersdorf

Hello,

I'm trying to install the patch for the current worm that
is going around.

I get an error that says it can't determing the
credibility of the file.

I followed the instructions of one file I read on
Microsoft and deleted the catroot2 folder in the system32
folder. I then tried the installation again. It started
to work, then gave me the same error. I went back to the
system32 folder and the catroot2 folder was BACK!

Please help!!!

Dan
(PS... please email me directly at
(e-mail address removed) if you respond to this)
 
I am having the same problem as Dan & Tom - when I try to
change the root2 I get an access denied message. Can
someone post the solution or e-mail me the solution
(e-mail address removed)
 
Dan;
Perform Disk Clean-up checking all boxes except "Compress old files"
Start/All Programs/Accessories/System Tools/Disk Clean-up

Go to Internet Options in the Control Panel:
Delete Cookies
Delete Files (check box "Delete all offline content")
Clear History

Reboot, login to an Administrator account.
Double click My Computer.
Double click C drive.
Double click Windows file.
Double click System32 file.
Right click catroot2, click rename, type "catroot2old"
ENTER
Otherwise:
Start the Administrative Tools utility in Control Panel.
Double-click Services.
Right-click Cryptographic Services, and then click Properties.
Click Automatic for Startup type, and then click Start.

If Cryptographic Services is already set to Automatic, disable it,
reboot, then go back and set to Automatic.
Reboot

Otherwise:
Check for missing/damaged System files:
Start/Run
Type "cmd" ENTER
Type "sfc /scannow" ENTER
Have Windows XP CD nearby.
Reboot when completed.
 
I have done these steps too and no luck. When I do the
catroot2 it tells me access denied. When I do the scannow
it does nothing?

Please help!
 
I am having this issue as well. There is a Microsoft support article which
tells you to go rename the directory in your Windows folder
SYSTEM32\CATROOT2 to CATROOTOLD, but it does not seem to help.

Any more ideas? Nothing here is working. I have a large group of machines,
some of which are accepting the patch, some of which are not. I am noticing
that the computers which are not accepting the patch are also not able to
access the WindowsUpdate website due to ActiveX restrictions in the Internet
control panel, but I have gone through this again and again. The settings
are all enabled to allow ActiveX.

HELP!!!!

Thanks!

-- Aaron
 
Follow this:
http://v4.windowsupdate.microsoft.com/troubleshoot/
Look for:
"Windows Update site displays Initialization error 0x800A01AD. Windows
Update.log has error 0x80040154"
"While the Windows Update Web site is loading, you receive
Initialization error 0x800A1391"
**********
Some of these you have tried, just skip if you are sure you tried
them:
Try these one at a time.
Please post back with the solution that resolved it for you.

1. Perform Disk Clean-up checking all boxes except "Compress old
files"
Start/All Programs/Accessories/System Tools/Disk Clean-up

2. Go to Internet Options in the Control Panel:
Delete Cookies
Delete Files (check box "Delete all offline content")
Clear History

3. Reboot, login to an Administrator account.
Double click My Computer.
Double click C drive.
Double click Windows file.
Double click System32 file.
Right click catroot2, click rename, type "catroot2old"
ENTER
Otherwise:
Start the Administrative Tools utility in Control Panel.
Double-click Services.
Right-click Cryptographic Services, and then click Properties.
Click Automatic for Startup type, and then click Start.

4. If Cryptographic Services is already set to Automatic, disable it,
reboot, then go back and set to Automatic.
Reboot

5. Start/Run
Type "msconfig" ENTER
Select "Normal Start-up"
Click OK, follow prompts and reboot

6. Start/Run
Type "cmd" ENTER

Type "net stop cryptsvc" ENTER.
Type "net start cryptsvc" ENTER.

Type "regsvr32 softpub.dll" ENTER.
Type "regsvr32 wintrust.dll" ENTER.

Type "regsvr32 initpki.dll" ENTER.
Type "regsvr32 dssenh.dll" ENTER.

Type "regsvr32 rsaenh.dll" ENTER.
Type "regsvr32 cryptdlg.dll" ENTER.

Close the box and install the patch.

7. Otherwise:
Check for missing/damaged System files:
Start/Run
Type "cmd" ENTER
Type "sfc /scannow" ENTER
Have Windows XP CD nearby.
Reboot when completed.
**************
Otherwise try these:
****Sections changed 6 August 2003****
POST BACK WITH THE EXACT INFORMATION FROM STEP 18 if all else fails.

1. Reboot computer then try updates one at a time if issue involved
multiple updates.

2. Check Date/Time

3. If you use AOL, minimize AOL and open Internet Explorer and try
Windows Update

4. What version?
Right click My Computer, click Properties?
What EXACTLY does it say?

5. Disable firewall

6. Disable antivirus

7. (Windows XP):
Reboot computer.
http://support.microsoft.com/?kbid=326815
Don't forget steps 6-9 catroot2 file.
Do this whether SP1 is the issue or not.

Another way to do #7:
Reboot, login to an Administrator account.
Double click My Computer.
Double click C drive.
Double click Windows file.
Double click System32 file.
Right click catroot2, click rename, type "catroot2old"
ENTER
Reboot

8. (Windows XP)
Go to Control Panel.
Click Windows Update on the left panel

9. Go to Internet Options in the Control Panel:
Delete Cookies
Delete Files (check box "Delete all offline content")
Clear History

10. Set a language in Internet Explorer:
To check the language setting in Internet Explorer:
(1.) Click "Tools" and then select "Internet Options".
(2.) Click "Languages".button
(3.) Make sure at least one language is listed in the "Language
Options" dialog box.

11. Disable the options "Automatically detect settings" and "Use
automatic configuration script."
To do this:
(1.) Open Internet Explorer.
(2.) Click "Tools," and then click "Internet Options."
(3.) Click "Connections," and then click "LAN Settings."
(4.) Make sure the check boxes for "Automatically detect settings" and
"Use automatic configuration script" are not selected.

12. Open Internet Explorer
Click Tools
Click Internet Options
Click Security tab.
Click "Internet Zone"
Click Default
Click OK and follow prompts.

13.
http://support.microsoft.com/?kbid=319585

14. Upgrade to Internet Explorer Service Pack 1 if not already
installed:
http://www.microsoft.com/windows/ie/downloads/critical/ie6sp1/default.asp

15. Start/Run
Type "msconfig" ENTER
Click Start-up tab and make a note of what is checked and unchecked.
Go back to General tab.
Select Selective Start-up (unless already selected).
Uncheck "Load Start-up group items".
Click OK, follow prompts and reboot.
Try windows Update again.
When done, go back to MSCONFIG.
Recheck Start-up tab items and place to normal Start-up if that was
original configuration.
Click OK and follow prompts.

16. Change the URL from "http..." to "https...".

17. http://support.microsoft.com/?kbid=193385

18. Check the Windows Update Log in the "C:\Windows\Windows
Update.log" for the exact error message.
See if something here fits
http://v4.windowsupdate.microsoft.com/troubleshoot/

--
Jupiter Jones [MVP]
An easier way to read newsgroup messages:
http://www.microsoft.com/windowsxp/pro/using/newsgroups/setup.asp
http://dts-l.org/index.html
 
Back
Top