Xem bản tiếng việt đầy đủ tại đây : http://thethao60s.com/index/239450/17082007.aspx

Xu ly loi khong the cai dat cac nang cap va cai dat chuong trinh

Khi thu tai ve mot dieu khien ActiveX, cai dat mot nang cap hoac cai dat goi dich vu cho Windows hoac cho thanh phan nao do cua Windows, hoac cai dat mot chuong trinh phan mem nhom thu ba ban co the gap mot so van de va viec cai dat khong thuc hien duoc. Bai nay se dua ra cac thong bao loi va mot so cach chinh sua loi de ban co the tiep tuc cong viec cai dat hay cap nhat cua minh.

Cac trieu chung co the gap phai nhu sau:

Ban co the nhan duoc thong bao loi khi cai dat mot chuong trinh hoac mot nang cap:

Digital Signature Not Found

The Microsoft digital signature affirms that software has been tested with Windows and that the software has not been altered since it was tested.

The software you are about to install does not contain a Microsoft digital signature. Therefore, there is no guarantee that this software works correctly with Windows.

Name of software package

If you want to search for Microsoft digitally signed software, visit the Windows Update Web site at http://windowsupdate.microsoft.com to see if one is available.

Do you want to continue the installation? 

Neu kich vao More Info, ban se nhan duoc thong bao duoi day:

Microsoft Windows
The signature on the software package you want to install is invalid. The software package is not signed properly.

Sau khi kich OK trong hop thoai thong bao loi dau tien, ban co the nhan duoc mot thong bao cho biet rang cai dat da thanh cong hoac co the la mot thong bao loi duoi day: 

Name of Update Package
The cryptographic operation failed due to a local security option setting.

Khi cai dat mot nang cap hoac cai dat mot goi dich vu, ban co the nhan duoc mot thong bao loi nhu duoi day:

Name of Update Package
Setup could not verify the integrity of the file Update.inf. Make sure the Cryptographic service is running on this computer. 
 

Failed to install catalog files. 
 

The software you are installing has not passed Windows Logo testing to verify its compatibility with Windows XP. (Tell me why this testing is important.)

This software will not be installed. Contact your system administrator. 
 

The software you are installing has not passed Windows Logo testing to verify its compatibility with this version of Windows. (Tell me why this testing is important.) 

Khi cai dat mot goi dich vu cua Windows XP, ban co the nhan duoc mot thong bao loi nhu thong bao duoi day: 

Service Pack 1 Setup could not verify the integrity of the file. Make sure the Cryptographic service is running on this computer 

Khi thuc hien cai dat cac thanh phan truy cap du lieu cua Microsoft (MDAC) 2.8 ban co the nhan duoc mot thong bao loi nhu thong bao duoi day. 

INF Install failure. Reason: The timestamp signature and/or certificate could not be verified or is malformed. 

Dung luong file %WINDIR%\System32\CatRoot2\Edb.log co the len den 20MB du file dien hinh chi nho hon 1MB.

Khi cai dat goi phan mem tu website cua Windows Update ban co the nhan duoc mot thong bao tuong tu nhu thong bao duoi day: 

The software has not passed Windows logo testing and will not be installed.

Khi kiem tra file %systemroot%\Windowsupdate.log, ban se co the thay mot muc co mot trong nhung loi sau:

0x80096001

0x80096005

0x80096010

0x800B0001

0x800B0003

0x800B0004

0x800B0109

0x8007f0da

Khi ban su dung nang cap Windows cua Microsoft tren may tinh Windows XP, qua trinh nang cap co the that bai va ban co the nhan duoc mot thong bao loi "0x8007f007". Thong bao loi nay xuat hien khong vao loai nang cap ban chon la gi.

File Svcpack.log co the gom cac muc nhu duoi day: 

Nguyen nhan

Van de nay co the xuat hien neu mot hoac mot so dieu kien duoi day dung:

Loi file ban ghi hoac du lieu trong thu muc %Systemroot%\System32\Catroot2
 

Cryptographic Services thiet lap o che do vo hieu hoa (disabled).
 

Cac file Windows khac bi sai hay bi mat.
 

Chu ky timestamp hoac chung chi co the khong duoc tham dinh hoac bi thay doi.
 

Thuoc tinh an duoc thiet lap cho thu muc %Windir% hoac mot trong nhung thu muc con cua no.
 

Thiet lap Group Policy Unsigned non-driver installation behavior (chi cho Windows 2000) duoc thiet lap la Do not allow installation hoac Warn but allow installation, hoac gia tri nhi phan cua Policy khong duoc thiet lap bang 0 trong khoa dang ki duoi day: 

HKEY_LOCAL_MACHINE\Software\Microsoft\Non-Driver Signing 

Thiet lap Enable trusted publisher lockdown cua Group Policy duoc bat, va ban khong co chung chi thich hop trong phan luu tru chung chi Trusted Publishers. Thiet lap Group Policy nay duoc dat duoi User Configuration, Windows Settings, Internet Explorer Maintenance, Security, Authenticode Settings trong Group Policy MMC snap-in.
 

Ban dang cai dat Internet Explorer 6 SP1, va goi bao mat 823559 (MS03-023) da duoc cai dat.
 

Thu muc phan phoi phan mem bi sai lac.

Giai phap

De giai quyet van de nay, ban su dung cac phuong phap duoi day. Sau khi thuc hien cac buoc trong moi phuong phap, ban hay kiem tra xem van de co duoc giai quyet hay khong truoc khi tiep tuc chuyen sang buoc tiep theo. Neu van de duoc giai quyet bang bat cu cach nao thi ban khong can phai su dung cac cach con lai. 

Phuong phap 1: Dat lai ten cho file Edb.log

Dat lai ten file Edb.log sau do cai dat chuong trinh lai mot lan nua. De dat lai ten cho file Edb.log, ban thuc hien cac buoc duoi day:

1.

Kich Start, kich Run, danh cmd trong hop Open, sau do kich OK.
 

2.

Tai cua so lenh, danh lenh duoi day, sau do nhan ENTER:

ren %systemroot%\system32\catroot2\Edb.log *.tst  

Phuong phap 2: Thiet lap cac dich vu ma hoa tu dong

Thiet lap cac dich vu ma hoa Cryptographic Services thanh tu dong Automatic, sau do cai chuong trinh lai mot lan nua. De thiet lap cac dich vu ma hoa thanh tu dong ban thuc hien cac buoc duoi day:

1.

Vao tien ich Administrative Tools trong Control Panel.
 

2.

Kich dup vao Services.
 

3.

Kich chuot phai vao Cryptographic Services, sau do kich Properties.
 

4.

Kich Automatic cho phan Startup type, sau do kich Start.
 

Luu y: Windows 2000 khong liet ke Cryptographic Services trong tien ich quan tri SERVICES Administrative Utility.

Phuong phap 3: Dat lai ten cho thu muc Catroot2

Dat lai ten cho thu muc Catroot2 (chi cho Windows XP va Windows Server 2003), sau do cai dat chuong trinh mot lan nua.

Luu y: Bo qua phuong phap nay neu he dieu hanh la Windows 2000. 

De dat lai ten cho thu muc Catroot2, ban thuc hien theo cac buoc sau:

1.

Kich Start, chon Run, danh cmd, sau do kich OK.
 

2.

Tai cua so lenh, ban danh cac lenh duoi day, sau do nhan ENTER

net stop cryptsvc
ren %systemroot%\System32\Catroot2
oldcatroot2
net start cryptsvc
exit

3.

Go bo toan bo cac file tmp*.cat tu thu muc sau:

%systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

Neu khong co file bat dau voi tmp ton tai trong thu muc nay, ban khong duoc bo bat ky file nao khac. Cac file .cat trong thu muc nay can thiet de cai dat hotfix va cac goi dich vu.

Quan trong: Khong duoc doi ten thu muc Catroot. Thu muc Catroot2 duoc tao lai mot cach tu dong boi Windows, nhung thu muc Catroot se khong duoc tao lai neu thu muc Catroot bi doi ten.

Phuong phap 4: Dang ki lai cac file DLL lien ket voi dich vu ma hoa Cryptographic Services

De dang ki cac file .dll lien ket voi Cryptographic Services, ban thuc hien cac buoi sau:

1.

Kich Start, chon Run, danh cmd trong hop Open, sau do nhan OK.
 

2.

Tai dau nhac lenh, ban danh cac lenh duoi day, sau do nhan ENTER sau moi lenh:

regsvr32 /u softpub.dll
regsvr32 /u wintrust.dll
regsvr32 /u initpki.dll
regsvr32 /u dssenh.dll
regsvr32 /u rsaenh.dll
regsvr32 /u gpkcsp.dll
regsvr32 /u sccbase.dll
regsvr32 /u slbcsp.dll
regsvr32 /u mssip32.dll
regsvr32 /u cryptdlg.dll
exit

Luu y: Kich OK neu ban duoc yeu cau. 

Luu y: Microsoft Windows 2000 khong co file Sccbase.dll. Neu ban dang su dung phien ban Windows 2000 thi hay bo qua file Sccbase.dll
 

3.

Khoi dong lai may tinh.
 

4.

Kich Start, chon Run, danh cmd trong hop, sau do nhan OK.
 

5.

Tai cua so lenh, ban danh cac lenh sau, nhan ENTER sau moi lenh:

regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 mssip32.dll
regsvr32 cryptdlg.dll
exit

Luu y: Kich OK neu ban duoc yeu cau.

Luu y: Microsoft Windows 2000 khong co file Sccbase.dll. Neu ban dang su dung phien ban Windows 2000 thi hay bo qua file Sccbase.dll
 

6.

Khoi dong lai may tinh.

Phuong phap 5: Go bo thuoc tinh an tu %Windir% va cac thu muc con cua no.

1.

Kich Start, chon Run, danh cmd trong hop Open, sau do nhan OK.
 

2.

Tai cua so lenh, ban danh cac lenh sau, nhan ENTER sau moi dong:

attrib -s -h %windir%
attrib -s -h %windir%\system32
attrib -s -h %windir%\system32\catroot2
exit

Phuong phap 6: Thiet lap chinh sach non-driver signing thanh silently succeed

Neu ban dang su dung phien ban Windows 2000, thiet lap Unsigned non-driver installation behavior cua Group Policy thanh Silently succeed. Thiet lap Group Policy nay duoc dat trong phan Computer Configuration, Windows Settings, Security Settings, Local Policies, Security Options trong Group Policy MMC snap-in.

1.

Kich Start, chon Run, danh regedit, sau do kich OK.
 

2.

Dinh vi va chon khoa duoi day trong registry: 

HKEY_LOCAL_MACHINE\Software\Microsoft\Non-Driver Signing 

3.

Kich chuot phai vao gia tri nhi phan Policy, sau do chon Modify.
 

4.

Du lieu Value se xuat hien duoi dinh dang sau:

0000  02

Nhan DELETE de xoa gia tri hien hanh (trong vi du nay la 02), sau do danh 0 (gia tri hien hanh se xuat hien bang 00)
.

5.

Kich OK, sau do thoat khoi Registry Editor.  

Phuong phap 7: Tat tam thoi Trusted Publishers Lockdown va cai dat cac chung chi thich hop cho phan luu tru chung chi trusted publishers cua ban

Ban co the tiep tuc su dung thiet lap Enable trusted publisher lockdown cua Group Policy, nhung truoc tien phai bo sung them cac chung chi thich hop vao phan luu tru chung chi Trusted Publishers. De thuc hien dieu nay, ban phai tat thiet lap Enable trusted publisher lockdown cua Group Policy, cai dat cac chung chi thich hop trong luu tru Trusted Publishers, sau do bat tro lai thiet lap Enable trusted publisher lockdown Group Policy. De cai dat chung chi thich hop cho cac nang cap san pham Microsoft Windows va Microsoft Internet Explorer, ban thuc hien cac buoc duoi day:

1.

Tai ban nang cap san pham cua Microsoft ma ban muon cai dat tu Microsoft Download Center, tu Windows Update Catalog, hoac tu Microsoft Update Catalog.
 

2.

Giai nen goi nang cap san pham vao mot thu muc tam thoi. Lenh ma su dung de thuc hien se phu thuoc vao nang cap ma ban cai dat. Xem kien thuc co ban co lien quan den nang cap de xac dinh lenh thich hop de su dung. Vi du, de giai nen nang cap bao mat 824146 cho Windows XP vao thu muc C:\824146, ban chay Windowsxp-kb824146-x86-enu -x:c:\824146. De giai nen nang cap bao mat 828750 cho Windows XP vao thu muc C:\828750 ban chay q828750.exe /c /t:c:\828750.
 

3.

Kich chuot phai vao file KBNumber.cat tu goi nang cap san pham trong thu muc tam thoi ma ban da tao trong buoc 2 va kich Properties.

Luu y: file KBNumber.cat co the nam trong mot thu muc con. Vi du, file co the nam trong thu muc C:\824146\sp1\update hoac trong thu muc C:\824146\sp2\update.
 

4.

Tren tab Digital Signatures, kich chu ky so sau do kich Details.
 

5.

Kich View Certificate, sau do kich Install Certificate.
 

6.

Kich Next de bat dau Certificate Import Wizard.
 

7.

Kich Place all certificates in the following store, sau do kich Browse.
 

8.

Kich Trusted Publishers, sau do kich OK.
 

9.

Kich Next, Finish, sau do kich OK.

Phuong phap 8: Tham dinh trang thai cua cac chung chi va import cac chung chi hong hoac mat tu may tinh khac.

De tham dinh cac chung chi trong duong dan chung chi hoac nang cap san pham Internet Explorer, ban thuc hien theo cac buoc duoi day:

Buoc 1: Tham dinh cac chung chi Microsoft 

1.

Trong Internet Explorer, click Tools, sau do chon Internet Options.
 

2.

Tren tab Content, kich Certificates.
 

3.

Tren tab Trusted Root Certification Authorities, kich dup Microsoft Root Authority. Neu chung chi nay bi mat thi ban chuyen sang buoc 2.
 

4.

Tren tab General, bao dam rang ngay cua Valid from la 1/10/1997 to 12/31/2020.
 

5.

Tren tab Certification Path, tham dinh rang This certificate is OK xuat hien duoi Certificate Status.
 

6.

Kich OK, sau do kich dup vao chung chi NO LIABILITY ACCEPTED
 

7.

Tren tab General bao dam gia tri ngay Valid from la 5/11/1997 to 1/7/2004.
 

8.

Tren tab Certification Path, tham dinh rang This certificate has expired or is not yet valid hoac This certificate is OK xuat hien duoi Certificate Status

Luu y: Mac du chung chi nay het han, nhung no se van tiep tuc lam viec. He dieu hanh co the khong lam viec neu chung chi bi mat hoac bi huy bo.
 

9.

Kich OK, sau do kich dup chung chi GTE CyberTrust Root. Ban co the co nhieu chung chi voi cung mot ten. Kiem tra chung chi ma co ngay het han la 2/23/2006.
 

10.

Tren tab General, bao dam rang gia tri ngay trong Valid from la "2/23/1996 to 2/23/2006". 
 

11.

Tren tab Certification Path, tham dinh rang This certificate is OK xuat hien duoi Certificate Status

Luu y: Mac du chung chi nay het han, nhung no se van tiep tuc lam viec. He dieu hanh co the khong lam viec neu chung chi bi mat hoac bi huy bo.
 

12.

Kich OK, sau do kich dup Thawte Timestamping CA.
 

13.

Tren tab General, bao dam rang gia tri ngay Valid from la "12/31/1996 to 12/31/2020". 
 

14.

Tren tab Certification Path, tham dinh rang This certificate is OK xuat hien duoi Certificate Status.

Buoc 2: Import cac chung chi hong hoac bi mat

Neu mot hoac nhieu chung chi nay bi sai hoac mat thi ban nen export cac chung chi mat hoac bi sai nay sang mot may tinh khac, sau do cai dat cac chung chi tren may tinh cua ban. De thuc export cac chung chi tren may tinh khac, ban thuc hien theo cac buoc sau: 

1.

Trong Internet Explorer, click Tools, sau do click Internet Options.
 

2.

Tren tab Content tab, click Certificates.
 

3.

Tren tab Trusted Root Certification Authorities, kich chung chi ma ban muon export.
 

4.

Kich Export, sau do theo cac chi dan de export chung chi nhu mot file DER encoded Binary x.509(.CER)
 

5.

Sau khi file chung chi duoc export, copy no vao may tinh ma ban muon import no.
 

6.

Tren may tinh ma ban muon import chung chi, kich dup chung chi do
 

7.

Kich Install certificate, sau do kich Next.
 

8.

Kich Finish, sau do kich OK.  

Phuong phap 9: Xoa file tam thoi va khoi dong lai cai dat hotfix hoac cai dat goi dich vu.

Luu y: Bo qua phuong phap nay neu he dieu hanh la Windows 2000.

De xoa file tam thoi va khoi dong lai cai dat hotfix va cai dat goi dich vu, ban thuc hien cac buoc sau:

1.

Xoa tat ca cac file tmp*.cat trong cac thu muc duoi day:

%systemroot%\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}

%systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

 

2.

Xoa tat ca cac file kb*.cat trong cac thu muc duoi day:

%systemroot%\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
%systemroot%\System32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}

3.

Xoa tat ca cac file oem*.* trong cac thu muc %systemroot%\inf
 

4.

Tai cua so lenh, danh lenh sau. Nhan ENTER sau moi lenh.

net stop cryptsvc
ren %systemroot%\System32\Catroot2
oldcatroot2
net start cryptsvc
exit

5.

Khoi dong lai cai dat hotfix bi loi hoac cai dat goi dich vu.

Phuong phap 10: Lam trong thu muc phan phoi phan mem

1.

Kich Start, chon Run, danh services.msc, sau do kich OK.
 

2.

Trong phan Services (Local), kich chuot phai vao Automatic Updates, sao do kich Stop.
 

3.

Toi thieu hoa cua so Services (local)
 

4.

Chon tat ca cac noi dung cua thu muc phan phoi Windows, sau do xoa chung.

Luu y: Mac dinh, cac thu muc nay duoc dat trong thu muc drive:\Windows\SoftwareDistribution. O day, drive la o dia noi Windows duoc cai dat.
 

5.

Bao dam rang thu muc phan phoi Windows la trong, sau do toi da hoa cua so Services (local)
 

6.

Trong phan Services (Local), kich chuot phai vao Automatic Updates, sau do kich Start.
 

7.

Khoi dong lai may tinh, sau do chay Windows Update mot lan nua.