search cancel

Error: "unrar.dll is not Symantec Signed. IU cannot continue processing." when install Intelligent Updater after 3/24/2022.


Article ID: 241845


Updated On:


Endpoint Protection


When run Intelligent Updater (IU) file, "Intelligent Updater session complete." message is displayed but definitions is not updated.
Log.IntelligentUpdater.txt shows following error.

ERROR: unrar.dll is not Symantec Signed. IU cannot continue processing.


Environment with no internet access


Two root certificates are required to authenticate the decompression module (unrar.dll) included in IU file.

[Digital Signature]
DigiCert High Assurance EV Root CA

[Secondary Signature]
DigiCert Assured ID Root CA (after 3/24/2022)
Thawte Timestamping CA (before 3/23/2022)

Applying IU will fail if "DigiCert Assured ID Root CA" certificate is not installed.


Follow these steps to install "DigiCert Assured ID Root CA" certificate.

  1. Download the certificate from
  2. Copy the certificate (*.crt) to the target machine. 
  3. Double-click the certificate and click [Install Certificate].
  4. Choose [Local Machine] then click [Next]. 
  5. Choose [Place all certificates in the following stores].
  6. Click [Browse] and choose [Trusted Root Certificate Authorities] and [OK].
  7. Click [Next] and [Finish]. 
  8. Click [Yes].

If the same error message still appears, verify DigiCert Assured ID Root CA is installed using following command of PowerShell.

Get-ChildItem -Path Cert:\LocalMachine\Root | Where-Object {$_.Thumbprint -eq "0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43"}

If the certificate is not installed, no information is returned. If the certificate is installed, following information is displaed.

Directory: Microsoft.PowerShell.Security\Certificate::LocalMachine\Root

Thumbprint                                Subject
----------                                -------
0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43  CN=DigiCert Assured ID Root CA,, O=DigiCert Inc, C=US 

Additional Information

If above steps do not resolve the issue, go to and download "DigiCert High Assurance EV Root CA" certificate. Follow the same procedure to add it to "Trusted Root Certificate Authority".