证书链无法建立到受信任的根权限 [英] A certificate chain could not be built to a trusted root authority

问题描述

在安装.NET Framework 4.6.2的过程中，出现错误：

.NET Framework安装失败：-2146762486。无法将证书链
构建到受信任的根权限

在以下位置提供了针对上述错误的解决方案此 MSDN博客链接，该链接执行以下步骤：

1。下载证书 http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt本地（例如：C：\Temp）

2。。您可以使用certmgr.exe实用工具通过使用以下命令添加证书命令行。有关更多信息，请参见MSDN上的Certmgr.exe（证书管理器工具）主题。

3。。打开管理命令提示符并运行此命令命令：certmgr.exe / add C：\Temp\MicRooCerAut2011_2011_03_22.cer / s / r localMachine root

4。接下来，尝试安装补丁KB3135996或KB3136000

我的问题：

安装。 NET框架4.6.2必须在多个生产系统上完成，因此， 上述步骤是否为标准 ？我的意思是， 在多个系统上安装相同证书是否会造成问题 ？当系统在某个时候连接到Internet时，是否会产生冲突？

PS：通过解决此问题（管理证书），方法是：将系统连接到Internet并不是我的选择，因为整个过程必须离线。

解决方案

< blockquote>

在多个系统上安装相同证书是否会造成问题？

否，不会即使系统将来会连接到Internet也是一个问题。

当您将系统连接到Internet并进行更新时，它可能会下载一包受信任的证书。这些证书将被添加到受信任的根存储中。现有的将被替换为IMO。

During the installation of .NET Framework 4.6.2, I got an error:

.NET Framework installation failed: -2146762486. A certificate chain could not be built to a trusted root authority

A solution to the above-mentioned error is given at this MSDN Blog link, which says to do the following steps:

1. Download the certificate http://www.microsoft.com/pki/certs/MicRooCerAut2011_2011_03_22.crt locally (Example: C:\Temp)

2. You can use the certmgr.exe utility to add the certificate by using the command line. For more information, see the Certmgr.exe (Certificate Manager Tool) topic at MSDN.

3. Open an admin command prompt and run this command: certmgr.exe /add C:\Temp\MicRooCerAut2011_2011_03_22.cer /s /r localMachine root

4. Next, try installing the patch KB3135996 or KB3136000

MY QUESTION:

The installation of .NET framework 4.6.2 has to be done on several production systems so, are the above-mentioned steps standard? I mean, could it create problem to install the same certificate on several systems? When the systems will be connected to the internet at some point, could it create conflict?

PS: Solving this problem (managing certificates) by connecting the systems to the Internet is not an option for me since the whole process must be offline.

解决方案

could it create problem to install the same certificate on several systems?

No, it will not be a problem even if the systems would be connected to the internet in the future.

When you connect the system to the internet and do the update it could download a pack of trusted certificates. These certificates will be added to the trusted root store. Existing ones will simply be IMO simply replaced.

这篇关于证书链无法建立到受信任的根权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！