Error: "unrar.dll is not Symantec Signed. IU cannot continue processing." when install Intelligent Updater after 3/24/2022.

book

Article ID: 241845

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

When run Intelligent Updater (IU) file, "Intelligent Updater session complete." message is displayed but definitions is not updated.
Log.IntelligentUpdater.txt shows following error.

-------
ERROR: unrar.dll is not Symantec Signed. IU cannot continue processing.
-------

Cause

Two root certificates are required to authenticate the decompression module (unrar.dll) included in IU file.

[Digital Signature]
DigiCert High Assurance EV Root CA

[Secondary Signature]
DigiCert Assured ID Root CA (after 3/24/2022)
Thawte Timestamping CA (before 3/23/2022)

Applying IU will fail if "DigiCert Assured ID Root CA" certificate is not installed.

Environment

Environment with no internet access

Resolution

Follow these steps to install "DigiCert Assured ID Root CA" certificate.

  1. Download the certificate from https://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt.
  2. Copy the certificate (*.crt) to the target machine. 
  3. Double-click the certificate and click [Install Certificate].
  4. Choose [Local Machine] then click [Next]. 
  5. Choose [Place all certificates in the following stores].
  6. Click [Browse] and choose [Trusted Root Certificate Authorities] and [OK].
  7. Click [Next] and [Finish]. 
  8. Click [Yes].

If the same error message still appears, verify DigiCert Assured ID Root CA is installed using following command of PowerShell.

Get-ChildItem -Path Cert:\LocalMachine\Root | Where-Object {$_.Thumbprint -eq "0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43"}

If the certificate is not installed, no information is returned. If the certificate is installed, following information is displaed.

Directory: Microsoft.PowerShell.Security\Certificate::LocalMachine\Root

Thumbprint                                Subject
----------                                -------
0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43  CN=DigiCert Assured ID Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US 

Additional Information

If above steps do not resolve the issue, go to https://cacerts.digicert.com/DigiCertHighAssuranceEVRootCA.crt and download "DigiCert High Assurance EV Root CA" certificate. Follow the same procedure to add it to "Trusted Root Certificate Authority".