Signature found but checksum failed - wrapper.exe in NFA

Products

• Network Flow Analysis

Issue/Introduction

After completing the upgrade to the latest version, some of our services are not working correctly.  We are seeing indications of errors in the log file:

A signature was found in "C:\CA\NFA\RIB\wrapper\wrapper.exe", but checksum failed: (Errorcode: 0x80096005) The timestamp signature and/or certificate could not be verified or is malformed. (0x80096005)

Cause

This could be caused from a corrupt file.

Resolution

You run a quick MD5 check on the file, using Powershell:

get-filehash C:\CA\NFA\RIB\wrapper\wrapper.exe -algorithm MD5

There are two other wrapper.exe that should also share the identical hash:

get-filehash C:\CA\NFA\Odata\bin\wrapper.exe -algorithm MD5
get-filehash C:\CA\NFA\MySql\wrapper\wrapper.exe -Algorithm MD5

So if the hash is different for RIB\wrapper, then the other two you can copy the the Odata\bin\wrapper.exe and replace the erroneous RIB\wrapper\wrapper.exe. 

Once that's been copied, restart the services.