Microsoft KB Archive/281458

= Error message when you install a Windows 2000 service pack or product update =

Article ID: 281458

Article Last Modified on 2/28/2007

-

APPLIES TO


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Windows 2000 Datacenter Server
 * Microsoft Windows 2000 Professional Edition
 * Microsoft Windows 2000 Server

-



This article was previously published under Q281458



SYMPTOMS
When you install a service pack or product update (for example, a critical update, a security patch, an update, or a hotfix) on a Windows 2000-based computer, you may receive an error message that is similar to the following:

Service Pack Setup Error

Failed to install catalog files

OK

KB123456 Setup Error

Setup could not verify the integrity of the file Update.inf. Make sure the cryptographic service is running on this computer.

OK



CAUSE
This problem may occur if any of the following conditions is true:

Option 10, &quot;Only trust items found in the trust DB,&quot; of the software publishing state key values has been changed to TRUE (the default setting is FALSE).

NOTE: To check the setting for Option 10, type setreg at a command prompt. or

The &quot;Microsoft Root Authority&quot; certificate or the &quot;NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.&quot; certificate under Trusted Root Certification Authorities has been removed. or

%SYSTEMROOT%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT file is corrupted.



RESOLUTION
To resolve the problem if Option 10 has been changed, type setreg 10 FALSE at a command prompt.

To resolve the problem if certificates have been removed, follow these steps:


 * On a computer that has the Microsoft Root Authority certificate installed, follow these steps:
 * Start Microsoft Internet Explorer.
 * On the Tools menu, click Internet Options.
 * Click the Content tab, and then click Certificates.
 * Click the Trusted Root Certification Authorities tab.
 * Scroll down until you locate Microsoft Root Authority certificate.
 * Click Export.
 * Follow the prompts to export the certificate to DER encoded Binary x.509(.CER)file
 * On the computer on which you cannot install the service pack or hotfix, import the certificate that you saved into the Trusted Root Certification Authorities.

To resolve the problem if the NT5INF.CAT file is damaged or corrupted, follow these steps:
 * 1) Use the EXPAND tool to expand NT5INF.CA_ to NT5INF.CAT.

Note The Nt5inf.ca_ file is located on the Windows 2000 Setup disk in the i386 folder.
 * 1) Restart in safe mode, and then replace %SYSTEMROOT%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT and %SYSTEMROOT%\system32\dllcache\nt5inf.cat with the expanded file.NOTE: To view %SYSTEMROOT%\system32\dllcache\nt5inf.cat, in Windows Explorer, on the Tools menu, click Folder Options, and then click the View tab. Click to select Show hidden files and folders, and then click to clear Hide extensions for known file types and Hide protected operating system files.

Additional query words: kbwin2000S kbwin2000Pro SP1 Error setreg

Keywords: kberrmsg kbprb kbsetup KB281458

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.