Symantec Endpoint Protection client failed to upgrade with Error - Error 25010. Could not locate "Microsoft Test Root Authority" certificate in "Trusted Root Certification Authorities" store.

Products

• Endpoint Protection

Issue/Introduction

Symantec Endpoint Protection 14.2.x client fails to upgrade to SEP 14.3 RU1 version.

Symantec Endpoint Protection 14.2.x client fails to upgrade to SEP 14.3 RU1 version while performing an upgrade ,however if removed the existing SEP 14.2.x Client using Cleanwipe Utility and reinstalled SEP 14.3 RU1 as a fresh setup works fine on the same Endpoint machine. 

Error 25010. Could not locate "Microsoft Test Root Authority" certificate in "Trusted Root Certification Authorities" store.

Environment

Symantec Endpoint Protection 14.3 RU1

Windows 10

 

Cause

 "Microsoft Test Root Authority" certificate is missing from the customer machine.

Windows denies to install certificate with access denied error.

MSI Log Errors-

2021-07-26T10:07:58.049Z INFO Failed to install certificate. HRESULT: 0x80070005
MSI (s) (28:48) [18:12:12:480]: Note: 1: 2205 2: 3: MsiPackageCertificate
MSI (s) (28:48) [18:12:12:480]: Note: 1: 2205 2: 3: MsiDigitalCertificate
MSI (s) (28:48) [18:13:04:329]: Doing action: CheckTeeferCertificate
Action 18:13:04: CheckTeeferCertificate.
Action start 18:13:04: CheckTeeferCertificate.
MSI (s) (28:00) [18:13:04:329]: Invoking remote custom action. DLL: C:\WINDOWS\Installer\MSIDAAA.tmp, Entrypoint: CheckTeeferCertificate
CheckTeeferCertificate begin
CheckTeeferCertificate Test Root Certificate is not installed, the installation will rollback.
CheckTeeferCertificate Test Root Certificate is not installed, the installation will rollback.
Error 25010. Could not locate "Microsoft Test Root Authority" certificate in "Trusted Root Certification Authorities" store. It is required for this build of Symantec Endpoint Protection. Please install it and retry Symantec Endpoint Protection installation.
MSI (s) (28!E8) [18:13:41:844]: Product: Symantec Endpoint Protection – Error 25010. Could not locate "Microsoft Test Root Authority" certificate in "Trusted Root Certification Authorities" store. It is required for this build of Symantec Endpoint Protection. Please install it and retry Symantec Endpoint Protection installation.
CheckTeeferCertificate end, returning: 1603
CustomAction CheckTeeferCertificate returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 18:13:41: CheckTeeferCertificate. Return value 3.

Resolution

Install the "Microsoft Test Root Authority" certificate to trusted root certification authorities on affected Endpoints. 

Note - This is not a Symantec Endpoint Protection client issue ,Please consult Microsoft to address the missing Microsoft Test Root Authority Certificate on Endpoints .