The installer integrity check failed with error code 0x80070057 when attempting to install the Endpoint Protection client 14.3 RU8 and later version

Products

• Endpoint Protection
• Endpoint Security

Issue/Introduction

When attempting to install or upgrade to the Symantec Endpoint Protection (SEP) 14.3 RU8 or later, the following error appears.




The SIS_INST.log may contain any of the following lines:

• File C:\Program Files\Symantec\Symantec Endpoint Protection\14.3.10148.8000.105\Bin64\Smc.exe is not trusted. Verification result: 3
• File C:\Program Files\Symantec\Symantec Endpoint Protection\14.3.10148.8000.105\Bin64\Smc.exe failed trust check. Error code: 8007007B = The filename, directory name, or volume label syntax is incorrect.
• File C:\Program Files\Symantec\Symantec Endpoint Protection\14.3.11213.9000.105\Bin64\sepWscSvc64.exe is not trusted. Verification result: 3

Cause

14.3 RU8 and later requires Microsoft Azure Code Signing (ACS) support. To correctly verify modules signed by Azure Code Signing, computers are required to have the "Microsoft Identity Verification Root Certificate Authority 2020" certificate authority (CA) installed. 

The 'Microsoft Identity Verification Root Certificate Authority 2020' certificate is not installed as a Trusted Root Certificate.

Resolution

The 'Microsoft Identity Verification Root Certificate Authority 2020' certificate needs to be installed into the Trusted Roots Certificate Store.