We are excited to announce that the IIS.NET Forums are moving to the new Microsoft Q&A experience. Learn more >

ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered withRSS

16 replies

Last post May 17, 2021 09:04 PM by jjones-panopto

  • ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered with

    Mar 29, 2021 04:18 PM|hemac|LINK

    Hello, using the WebPI, ARR install is failing with:


    Install completed (Failure): 'Application Request Routing 3.0'
    ARRv3_0 : Failed.
    Downloaded file failed signature verification and may have been tampered with


    I have this install automated so I'd like to continue using the WebPI and not have to do it manually. Was there an update to either the WebPI or Application Request Routing that is causing this to fail? I run daily automation tests, and they have been failing in this way since Saturday 27, March, 2021. I can post the log if it helps. Thank you.

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 29, 2021 06:59 PM|jkattmann|LINK

    I see the same thing ... this has happened in the past (there are previous forum topics when it occurred) where the signature is not updated correctly on the backend, Can someone from the platform install team resolve this?


    Full Log

    WebPiCmd Information: 0 : 
        DateTime=2021-03-29T18:54:50.9828213Z
    WebPiCmd Warning: 0 : The software that you obtain using the Web Platform Installer Command Line Tool is licensed to you by its owner.  Microsoft grants you no rights for third party software.
        DateTime=2021-03-29T18:54:50.9828213Z
    WebPiCmd Verbose: 0 : Executing command: "C:\Program Files\Microsoft\Web Platform Installer\WebpiCmd-x64.exe" /Install /Products:"UrlRewrite2,ARRv3_0,WDeploy36NoSMO,HTTPLogging" /AcceptEULA /SuppressReboot /SuppressPostFinish /Log:wpi.log 
        DateTime=2021-03-29T18:54:50.9984474Z
    WebPiCmd Information: 0 : Successfully loaded primary feed: https://go.microsoft.com/?linkid=9842185
        DateTime=2021-03-29T18:54:56.1081136Z
    WebPiCmd Information: 0 : The following products are not available on this machine or already installed: UrlRewrite2, WDeploy36NoSMO, HTTPLogging
        DateTime=2021-03-29T18:54:56.6081392Z
    WebPiCmd Start: 0 : The following software is going to be installed:
        DateTime=2021-03-29T18:54:56.7018943Z
    WebPiCmd Information: 0 : EULA: 'Application Request Routing 3.0', which is owned by 'Microsoft', will be downloaded from 'http://download.microsoft.com/download/E/9/8/E9849D6A-020E-47E4-9FD0-A023E99B54EB/requestRouter_amd64.msi'.
        DateTime=2021-03-29T18:54:56.7018943Z
    WebPiCmd Information: 0 : The license agreement to 'Application Request Routing 3.0' is available at 'http://go.microsoft.com/?linkid=9835457'.
        DateTime=2021-03-29T18:54:56.7018943Z
    WebPiCmd Stop: 0 : Accepted EULA.
        DateTime=2021-03-29T18:54:56.7018943Z
    WebPiCmd Start: 0 : Starting Installation
        DateTime=2021-03-29T18:54:56.7018943Z
    WebPiCmd Information: 0 : Started downloading products...
        DateTime=2021-03-29T18:54:56.7331466Z
    WebPiCmd Information: 0 : Started downloading: 'Application Request Routing 3.0'
        DateTime=2021-03-29T18:54:56.8894028Z
    WebPiCmd Information: 0 : Downloaded: 'Application Request Routing 3.0'
        DateTime=2021-03-29T18:54:56.9675291Z
    WebPiCmd Information: 0 : Install completed (Failure): 'Application Request Routing 3.0'
        DateTime=2021-03-29T18:54:57.0456587Z
    WebPiCmd Verbose: 0 : Install completed (Failure): 'ARRv3_0'
        DateTime=2021-03-29T18:54:57.0456587Z
    WebPiCmd Error: 0 : ARRv3_0 : Failed.
    Downloaded file failed signature verification and may have been tampered with
        DateTime=2021-03-29T18:54:57.0456587Z
    WebPiCmd Information: 0 : 
        DateTime=2021-03-29T18:54:57.7175672Z
    WebPiCmd Start: 0 : Verifying successful installation...
        DateTime=2021-03-29T18:54:57.7175672Z
    WebPiCmd Information: 0 : Application Request Routing 3.0                    False
        DateTime=2021-03-29T18:54:57.7331880Z
    WebPiCmd Verbose: 0 : Download count: 0 Mb, 0 sec
        DateTime=2021-03-29T18:54:57.7331880Z
    WebPiCmd Verbose: 0 : Installation count: 0 Mb, 0 sec
        DateTime=2021-03-29T18:54:57.7331880Z
    WebPiCmd Verbose: 0 : Products            , Down. Size, Install Time, Down. Time, Install Size, Log Size  
        DateTime=2021-03-29T18:54:57.7331880Z
    WebPiCmd Verbose: 0 : ARRv3_0             , 2.38      , 0         , 0         , 0         , 0         
        DateTime=2021-03-29T18:54:57.7331880Z
    WebPiCmd Verbose: 0 : Total (download size/install time): 2.38 Mb, 0 sec
        DateTime=2021-03-29T18:54:57.7331880Z
    WebPiCmd Error: 0 : Install of Products: FAILURE
        DateTime=2021-03-29T18:54:57.7331880Z

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 30, 2021 02:11 AM|samwu|LINK

    Hi hemac,

    hemac

    Install completed (Failure): 'Application Request Routing 3.0'
    ARRv3_0 : Failed.
    Downloaded file failed signature verification and may have been tampered with

    You can try to download arr from the link below and install it.

    Microsoft Application Request Routing 3.0 (x64)

    Best regards,

    Sam

    IIS.NET forums are moving to a new home on Microsoft Q&A, we encourage you to go to Microsoft Q&A for .NET for posting new questions and get involved today. Learn more >
  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 30, 2021 03:30 AM|hemac|LINK

    Hi Sam,

    Thanks for the tip. I know I can download ARR manually, but my process needs to be automated and uses the Web Platform installer to install ARR and it's dependencies in the order they need to be installed in. Also, it looks like this might be something that jkattmann also had an issue with this. If the Web Platform Installer isn't working for installing ARR for multiple people, then it seems something needs fixing on the WebPI side.

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 30, 2021 04:18 PM|hemac|LINK

    Still having the same install issue today. Here's more info on my automation script:

    $tempDir = "C:\Temp\MicrosoftDownload"
    $webPIurl = "https://go.microsoft.com/fwlink/?LinkId=287166"
    $webPImsi = "$tempDir\x64WebPI.msi"
    $webPIexe = "C:\Program Files\Microsoft\Web Platform Installer\WebpiCmd-x64.exe"
    
    if (!(Test-Path $webPIexe))
    {
    	if (!(Test-Path $tempDir))
    	{
    		New-Item $tempDir -Type Directory
    	}
    
    	Invoke-WebRequest $webPIurl -OutFile $webPImsi
            Start-Process $webPImsi "/qn" -Wait
    }
    if (Test-Path $webPIexe)
    {
    	& $webPIexe /install /Products:ARRv3_0 /AcceptEULA /SuppressPostFinish
    }
    

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 31, 2021 09:34 AM|samwu|LINK

    Hi hemac,

    hemac

    but my process needs to be automated and uses the Web Platform installer to install ARR and it's dependencies in the order they need to be installed in

    The api of arr in the Web Platform may be incompatible with your iis version, so if the installation fails in the Web Platform, you can only download and install using an external link.

    Best regards,

    Sam

    IIS.NET forums are moving to a new home on Microsoft Q&A, we encourage you to go to Microsoft Q&A for .NET for posting new questions and get involved today. Learn more >
  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 31, 2021 12:31 PM|jkattmann|LINK

    Hi samwu,

    This issue occurs on Windows Server 2019 Datacenter (version below) running IIS 10.0 (version below). This worked a few days ago on the exact same OS/IIS versions.  The mismatched hash happens with WPI from time to time when packages are updated and the hash is not, just look at the response from choyer on this similar thread about PHP failing install in WPI (https://forums.iis.net/t/1156761.aspx?Downloaded+file+failed+signature+verification+and+may+have+been+tampered+with)

    [environment]::OSVersion.Version

    Major  Minor  Build  Revision
    -----  -----  -----  --------
    10     0      17763  0       

    PS C:\windows\system32> get-itemproperty HKLM:\SOFTWARE\Microsoft\InetStp\  | select setupstring,versionstring 

    SetupString VersionString
    ----------- -------------
    IIS 10.0    Version 10.0 

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Mar 31, 2021 03:44 PM|hemac|LINK

    Thanks for the comments so far. It's too bad that this happens occasionally and the WebPI doesn't work for what it's supposed to. I decided to just change my automation script to download and install the iis extensions separately and in the right order (without the WebPI) and it works fine. Sample script:

    $tempDir = "C:\Temp\MicrosoftDownload"
    $urlRewritePath = "$env:windir\System32\inetsrv\rewrite.dll" $urlRewriteUrl = "https://download.microsoft.com/download/1/2/8/128E2E22-C1B9-44A4-BE2A-5859ED1D4592/rewrite_amd64_en-US.msi" $urlRewriteMsi = "$tempDir\rewrite_amd64_en-US.msi"
    $arrPath = "C:\Program Files\IIS\Application Request Routing\requestRouter.dll" $arrUrl = "https://go.microsoft.com/fwlink/?LinkID=615136" $arrMsi = "$tempDir\requestRouter_amd64.msi" if (!(Test-Path $urlRewritePath)) { if (!(Test-Path $tempDir)) { New-Item $tempDir -Type Directory } Invoke-WebRequest $urlRewriteUrl -OutFile $urlRewriteMsi Start-Process $urlRewriteMsi "/passive" -Wait } if (!(Test-Path $arrPath)) { if (!(Test-Path $tempDir)) { New-Item $tempDir -Type Directory } Invoke-WebRequest $arrUrl -OutFile $arrMsi Start-Process $arrMsi "/passive" -Wait }

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 01, 2021 12:00 AM|thejeremym|LINK

    I am having the same exact problem as hemac and need a fix asap. Manually installing ARR didnt seem to resolve the problem for me. Like hemac, I need this to be automated and my deployments are failing now. Please advise. 

    hemac, $arrPath is not defined in your script and returns an error. 

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 01, 2021 03:23 PM|hemac|LINK

    Hi thejeremym,

    You're right. I was also missing the $urlRewritePath in my example. I had declared those before a call to the function that this code snippet is in. I edited my script above to include the paths (these are just the default install paths). Hopefully that works for you.

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 05, 2021 08:21 PM|zoltan.lehoczky|LINK

    Same here today, but interestingly, only when done on an Azure Cloud Service's VM, not on my own machine.

    Just installing the MSIs directly is a viable alternative; I recommend using the /quiet switch though.

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 19, 2021 03:07 PM|GB-DH|LINK

    Any further update on this, as like hemac I am completely stuck with my automation??

    Like hemac also, I see this issue occurring frequently, even having reported once and had it fixed myself.  It's beyond a joke a corporation the size of Microsoft can mess the same thing up over and over .... 

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 19, 2021 04:43 PM|ChrisSfanos|LINK

    Hi folks

    I took a look at this - the entry ARRv3_0 does not have a signature check block in the feed, so it shouldn't be getting stuck here.  Are you running WebPI 5.1?  I also tried installing it on my Windows 10 client (sorry , I don't have access to the Windows Server box) and it installed correctly with no signature download failure.  So I'm not exactly sure what is happening for those users seeing this error.  

    Thanks

    Chris

    Chris Sfanos
    Web Platform Installer PM
  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 19, 2021 04:55 PM|thejeremym|LINK

    Neat. I opened a ticket with MS support and they confirmed there is an issue-

    We have observed that WPI shows the old release date for ARR3.0 which is 5/27/2015.

    There is known issue with ARR 3 released on 5/27/2015 which is listed in Web PI. ARR PG is working on the fix.

    Work around: Use MSI/Offline installer to install the latest version of ARR3.0.

    Download Microsoft Application Request Routing 3.0 (x64) from Official Microsoft Download Center Download Microsoft Application Request Routing 3.0 (x86) from Official Microsoft Download Center

     

    We will keep you posted once we get the updates from our ARR product team..

    Please feel free to reach out to me in case of any questions or concerns.

    I asked when the fix would be available they have no ETA.

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    Apr 20, 2021 07:17 AM|GB-DH|LINK

    hemac

    I edited my script above to include the paths (these are just the default install paths). Hopefully that works for you.

    Absolutely awesome cheers hemac, that did the trick for me!!   Think I'll leave that Web Platform Installer well alone for the future now, it's caused nothing but grieve ever since I laid eyes on it :D 

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    May 11, 2021 07:13 AM|Embers|LINK

    Hi any update on this?

    Thanks

  • Re: ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered wi...

    May 17, 2021 09:04 PM|jjones-panopto|LINK

    hemac


    Install completed (Failure): 'Application Request Routing 3.0'
    ARRv3_0 : Failed.
    Downloaded file failed signature verification and may have been tampered with


    As a side note, I saw the same error with webPlatformInstaller 5.0.   After updating to webPI 5.1 ARR installs successfully.

    I updated from here: https://www.microsoft.com/web/downloads/platform.aspx -> this download is 5.1 even though the page says 5.0.