Rutoken S, Устаревший сертификат
Конец setupapi.dev.log
>>> [Setup Import Driver Package - C:\Windows\system32\Aktiv Co\rtIFDH\rtIFDH.inf]
>>> Section start 2022/07/26 08:02:58.194
cmd: C:\Windows\System32\MsiExec.exe -Embedding 72BA3B2E4FA23612E1F7692FB41DD777 E Global\MSI0000
inf: Provider: Aktiv Co.
inf: Class GUID: {50dd5230-ba8a-11d1-bf5d-0000f805f530}
inf: Driver Version: 02/27/2012,2.26.0.0
inf: Catalog File: rtIFDH.cat
ump: Import flags: 0x00000021
pol: {Driver package policy check} 08:02:58.265
pol: {Driver package policy check - exit(0x00000000)} 08:02:58.265
sto: {Stage Driver Package: C:\Windows\system32\Aktiv Co\rtIFDH\rtIFDH.inf} 08:02:58.268
inf: {Query Configurability: C:\Windows\system32\Aktiv Co\rtIFDH\rtIFDH.inf} 08:02:58.283
inf: Driver package 'rtIFDH.inf' is configurable.
inf: {Query Configurability: exit(0x00000000)} 08:02:58.293
flq: {FILE_QUEUE_COMMIT} 08:02:58.298
flq: Copying 'C:\Windows\system32\Aktiv Co\rtIFDH\rtIFDH.sys' to 'C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.sys'.
flq: Copying 'C:\Windows\system32\Aktiv Co\rtIFDH\rtIFDH.cat' to 'C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.cat'.
flq: Copying 'C:\Windows\system32\Aktiv Co\rtIFDH\rtIFDH.inf' to 'C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.inf'.
flq: {FILE_QUEUE_COMMIT - exit(0x00000000)} 08:02:58.388
sto: {DRIVERSTORE IMPORT VALIDATE} 08:02:58.396
sig: Driver package catalog is valid.
sig: {_VERIFY_FILE_SIGNATURE} 08:02:58.948
sig: Key = rtIFDH.inf
sig: FilePath = C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.inf
sig: Catalog = C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.cat
! sig: Verifying file against specific (valid) catalog failed.
! sig: Error 0x800b0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.
sig: {_VERIFY_FILE_SIGNATURE exit(0x800b0109)} 08:02:59.013
sig: {_VERIFY_FILE_SIGNATURE} 08:02:59.030
sig: Key = rtIFDH.inf
sig: FilePath = C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.inf
sig: Catalog = C:\Windows\System32\DriverStore\Temp\{bc287e41-eff8-ea48-af0b-35bcf2955701}\rtIFDH.cat
! sig: Verifying file against specific Authenticode(tm) catalog failed.
! sig: Error 0x800b010a: A certificate chain could not be built to a trusted root authority.
sig: {_VERIFY_FILE_SIGNATURE exit(0x800b010a)} 08:02:59.071
!!! sig: Driver package catalog file certificate does not chain to a root, and Code Integrity is enforced.
!!! sig: Driver package failed signature validation. Error = 0xE0000247
sto: {DRIVERSTORE IMPORT VALIDATE: exit(0xe0000247)} 08:02:59.083
!!! sig: Driver package failed signature verification. Error = 0xE0000247
!!! sto: Failed to import driver package into Driver Store. Error = 0xE0000247
sto: {Stage Driver Package: exit(0xe0000247)} 08:02:59.101
<<< Section end 2022/07/26 08:02:59.112
<<< [Exit status: FAILURE(0xe0000247)]
И действительно, дайжесты rtIFDH.* подписаны сертификатом Microsoft Compatibility Publisher, который кончился в 2013 году. Пресловутый untrusted root, по-видимому Microsoft Root Authority, кончился в 2020
Это для Рутокен S standalone. Rutoken ECP который у меня тоже есть, встал нормально на другой машине.