DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 281458 - Last Review: September 18, 2009 - Revision: 3.0

This article was previously published under Q281458

SYMPTOMS

When you install a service pack or product update (for example, a critical update, a security patch, an update, or a hotfix) on a Windows 2000-based computer, you may receive an error message that is similar to the following:
Service Pack Setup Error
Failed to install catalog files
OK

KB123456 Setup Error
Setup could not verify the integrity of the file Update.inf. Make sure the cryptographic service is running on this computer.
OK

CAUSE

This problem may occur if any of the following conditions are true:

Option 10, "Only trust items found in the trust DB," of the software publishing state key values has been changed to TRUE (the default setting is FALSE).

NOTE: To check the setting for Option 10, type setreg at a command prompt. or

The "Microsoft Root Authority" certificate or the "NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc." certificate under Trusted Root Certification Authorities has been removed. or

%SYSTEMROOT%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT file is corrupted.

RESOLUTION

To resolve the problem if Option 10 has been changed, type setreg 10 FALSE at a command prompt.

To resolve the problem if certificates have been removed, follow these steps:
  • On a computer that has the Microsoft Root Authority certificate installed, follow these steps:
    1. Start Microsoft Internet Explorer.
    2. On the Tools menu, click Internet Options.
    3. Click the Content tab, and then click Certificates.
    4. Click the Trusted Root Certification Authorities tab.
    5. Scroll down until you locate Microsoft Root Authority certificate.
    6. Click Export.
    7. Follow the prompts to export the certificate to a DER encoded Binary x.509(.CER) file.
  • On the computer on which you cannot install the service pack or hotfix, import the certificate that you saved into the Trusted Root Certification Authorities. Beside importing the certificate to Internet Options, you also must import this certificate to the Local System Account.
    1. Click Start, click Run, and then click mmc.exe.
    2. Click Console, and then select Add/Remove Snap-in.
    3. Click the Add button, and then insert a Certificates snap-in.
    4. In the Certificate snap-in import window, click Computer Account, and then click Next.
    5. Click Local Computer, and then click Finish.
    6. Move to the Console Root, expand Certificates, expand Trusted Root Certification Authorities, right-click Certificates, and then import the certificate to Computer Account.
To resolve the problem if the NT5INF.CAT file is damaged or corrupted, follow these steps:
  1. Use the EXPAND tool to expand NT5INF.CA_ to NT5INF.CAT.

    Note The Nt5inf.ca_ file is located on the Windows 2000 Setup disk in the i386 folder.
  2. Restart in safe mode, and then replace %SYSTEMROOT%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT and %SYSTEMROOT%\system32\dllcache\nt5inf.cat with the expanded file.NOTE: To view %SYSTEMROOT%\system32\dllcache\nt5inf.cat, in Windows Explorer, on the Tools menu, click Folder Options, and then click the View tab. Click to select Show hidden files and folders, and then click to clear Hide extensions for known file types and Hide protected operating system files.

APPLIES TO
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Server
Keywords: 
kberrmsg kbprb kbsetup KB281458
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support