ARRv3_0 : Failed. Downloaded file failed signature verification and may have been tampered with

Question

User1677007772 posted

Hello, using the WebPI, ARR install is failing with:

---

Install completed (Failure): 'Application Request Routing 3.0'
ARRv3_0 : Failed.
Downloaded file failed signature verification and may have been tampered with

---

I have this install automated so I'd like to continue using the WebPI and not have to do it manually. Was there an update to either the WebPI or Application Request Routing that is causing this to fail? I run daily automation tests, and they have been failing in this way since Saturday 27, March, 2021. I can post the log if it helps. Thank you.

Answer 1

User-1295379481 posted

I see the same thing ... this has happened in the past (there are previous forum topics when it occurred) where the signature is not updated correctly on the backend, Can someone from the platform install team resolve this?

---

Full Log

WebPiCmd Information: 0 : 
    DateTime=2021-03-29T18:54:50.9828213Z
WebPiCmd Warning: 0 : The software that you obtain using the Web Platform Installer Command Line Tool is licensed to you by its owner.  Microsoft grants you no rights for third party software.
    DateTime=2021-03-29T18:54:50.9828213Z
WebPiCmd Verbose: 0 : Executing command: "C:\Program Files\Microsoft\Web Platform Installer\WebpiCmd-x64.exe" /Install /Products:"UrlRewrite2,ARRv3_0,WDeploy36NoSMO,HTTPLogging" /AcceptEULA /SuppressReboot /SuppressPostFinish /Log:wpi.log 
    DateTime=2021-03-29T18:54:50.9984474Z
WebPiCmd Information: 0 : Successfully loaded primary feed: https://go.microsoft.com/?linkid=9842185
    DateTime=2021-03-29T18:54:56.1081136Z
WebPiCmd Information: 0 : The following products are not available on this machine or already installed: UrlRewrite2, WDeploy36NoSMO, HTTPLogging
    DateTime=2021-03-29T18:54:56.6081392Z
WebPiCmd Start: 0 : The following software is going to be installed:
    DateTime=2021-03-29T18:54:56.7018943Z
WebPiCmd Information: 0 : EULA: 'Application Request Routing 3.0', which is owned by 'Microsoft', will be downloaded from 'http://download.microsoft.com/download/E/9/8/E9849D6A-020E-47E4-9FD0-A023E99B54EB/requestRouter_amd64.msi'.
    DateTime=2021-03-29T18:54:56.7018943Z
WebPiCmd Information: 0 : The license agreement to 'Application Request Routing 3.0' is available at 'http://go.microsoft.com/?linkid=9835457'.
    DateTime=2021-03-29T18:54:56.7018943Z
WebPiCmd Stop: 0 : Accepted EULA.
    DateTime=2021-03-29T18:54:56.7018943Z
WebPiCmd Start: 0 : Starting Installation
    DateTime=2021-03-29T18:54:56.7018943Z
WebPiCmd Information: 0 : Started downloading products...
    DateTime=2021-03-29T18:54:56.7331466Z
WebPiCmd Information: 0 : Started downloading: 'Application Request Routing 3.0'
    DateTime=2021-03-29T18:54:56.8894028Z
WebPiCmd Information: 0 : Downloaded: 'Application Request Routing 3.0'
    DateTime=2021-03-29T18:54:56.9675291Z
WebPiCmd Information: 0 : Install completed (Failure): 'Application Request Routing 3.0'
    DateTime=2021-03-29T18:54:57.0456587Z
WebPiCmd Verbose: 0 : Install completed (Failure): 'ARRv3_0'
    DateTime=2021-03-29T18:54:57.0456587Z
WebPiCmd Error: 0 : ARRv3_0 : Failed.
Downloaded file failed signature verification and may have been tampered with
    DateTime=2021-03-29T18:54:57.0456587Z
WebPiCmd Information: 0 : 
    DateTime=2021-03-29T18:54:57.7175672Z
WebPiCmd Start: 0 : Verifying successful installation...
    DateTime=2021-03-29T18:54:57.7175672Z
WebPiCmd Information: 0 : Application Request Routing 3.0                    False
    DateTime=2021-03-29T18:54:57.7331880Z
WebPiCmd Verbose: 0 : Download count: 0 Mb, 0 sec
    DateTime=2021-03-29T18:54:57.7331880Z
WebPiCmd Verbose: 0 : Installation count: 0 Mb, 0 sec
    DateTime=2021-03-29T18:54:57.7331880Z
WebPiCmd Verbose: 0 : Products            , Down. Size, Install Time, Down. Time, Install Size, Log Size  
    DateTime=2021-03-29T18:54:57.7331880Z
WebPiCmd Verbose: 0 : ARRv3_0             , 2.38      , 0         , 0         , 0         , 0         
    DateTime=2021-03-29T18:54:57.7331880Z
WebPiCmd Verbose: 0 : Total (download size/install time): 2.38 Mb, 0 sec
    DateTime=2021-03-29T18:54:57.7331880Z
WebPiCmd Error: 0 : Install of Products: FAILURE
    DateTime=2021-03-29T18:54:57.7331880Z

Answer 2

User1065476709 posted

Hi hemac,

Install completed (Failure): 'Application Request Routing 3.0'
ARRv3_0 : Failed.
Downloaded file failed signature verification and may have been tampered with

You can try to download arr from the link below and install it.

Microsoft Application Request Routing 3.0 (x64)

Best regards,

Sam

Answer 3

User1677007772 posted

Hi Sam,

Thanks for the tip. I know I can download ARR manually, but my process needs to be automated and uses the Web Platform installer to install ARR and it's dependencies in the order they need to be installed in. Also, it looks like this might be something that jkattmann also had an issue with this. If the Web Platform Installer isn't working for installing ARR for multiple people, then it seems something needs fixing on the WebPI side.

Answer 4

User1677007772 posted

Still having the same install issue today. Here's more info on my automation script:

$tempDir = "C:\Temp\MicrosoftDownload"
$webPIurl = "https://go.microsoft.com/fwlink/?LinkId=287166"
$webPImsi = "$tempDir\x64WebPI.msi"
$webPIexe = "C:\Program Files\Microsoft\Web Platform Installer\WebpiCmd-x64.exe"

if (!(Test-Path $webPIexe))
{
	if (!(Test-Path $tempDir))
	{
		New-Item $tempDir -Type Directory
	}

	Invoke-WebRequest $webPIurl -OutFile $webPImsi
        Start-Process $webPImsi "/qn" -Wait
}
if (Test-Path $webPIexe)
{
	& $webPIexe /install /Products:ARRv3_0 /AcceptEULA /SuppressPostFinish
}

Answer 5

User1065476709 posted

Hi hemac,

but my process needs to be automated and uses the Web Platform installer to install ARR and it's dependencies in the order they need to be installed in

The api of arr in the Web Platform may be incompatible with your iis version, so if the installation fails in the Web Platform, you can only download and install using an external link.

Best regards,

Sam

Answer 6

User-1295379481 posted

Hi samwu,

This issue occurs on Windows Server 2019 Datacenter (version below) running IIS 10.0 (version below). This worked a few days ago on the exact same OS/IIS versions.  The mismatched hash happens with WPI from time to time when packages are updated and the hash is not, just look at the response from choyer on this similar thread about PHP failing install in WPI (https://forums.iis.net/t/1156761.aspx?Downloaded+file+failed+signature+verification+and+may+have+been+tampered+with)

[environment]::OSVersion.Version

Major  Minor  Build  Revision
-----  -----  -----  --------
10     0      17763  0       

PS C:\windows\system32> get-itemproperty HKLM:\SOFTWARE\Microsoft\InetStp\  | select setupstring,versionstring 

SetupString VersionString
----------- -------------
IIS 10.0    Version 10.0 

Answer 7

User1677007772 posted

Thanks for the comments so far. It's too bad that this happens occasionally and the WebPI doesn't work for what it's supposed to. I decided to just change my automation script to download and install the iis extensions separately and in the right order (without the WebPI) and it works fine. Sample script:

$tempDir = "C:\Temp\MicrosoftDownload"
$urlRewritePath = "$env:windir\System32\inetsrv\rewrite.dll"
$urlRewriteUrl = "https://download.microsoft.com/download/1/2/8/128E2E22-C1B9-44A4-BE2A-5859ED1D4592/rewrite_amd64_en-US.msi"
$urlRewriteMsi = "$tempDir\rewrite_amd64_en-US.msi"
$arrPath = "C:\Program Files\IIS\Application Request Routing\requestRouter.dll"
$arrUrl = "https://go.microsoft.com/fwlink/?LinkID=615136"
$arrMsi = "$tempDir\requestRouter_amd64.msi"

if (!(Test-Path $urlRewritePath))
{
    if (!(Test-Path $tempDir))
    {
        New-Item $tempDir -Type Directory
    }

    Invoke-WebRequest $urlRewriteUrl -OutFile $urlRewriteMsi
    Start-Process $urlRewriteMsi "/passive" -Wait
}
if (!(Test-Path $arrPath))
{
    if (!(Test-Path $tempDir))
    {
        New-Item $tempDir -Type Directory
    }

    Invoke-WebRequest $arrUrl -OutFile $arrMsi
    Start-Process $arrMsi "/passive" -Wait
}

Answer 8

User-1973986724 posted

I am having the same exact problem as hemac and need a fix asap. Manually installing ARR didnt seem to resolve the problem for me. Like hemac, I need this to be automated and my deployments are failing now. Please advise. 

hemac, $arrPath is not defined in your script and returns an error. 

Answer 9

User1677007772 posted

Hi thejeremym,

You're right. I was also missing the $urlRewritePath in my example. I had declared those before a call to the function that this code snippet is in. I edited my script above to include the paths (these are just the default install paths). Hopefully that works for you.

Answer 10

User1159362863 posted

Same here today, but interestingly, only when done on an Azure Cloud Service's VM, not on my own machine.

Just installing the MSIs directly is a viable alternative; I recommend using the /quiet switch though.

Answer 11

User-356733082 posted

Any further update on this, as like hemac I am completely stuck with my automation??

Like hemac also, I see this issue occurring frequently, even having reported once and had it fixed myself.  It's beyond a joke a corporation the size of Microsoft can mess the same thing up over and over .... 

Answer 12

User-162856161 posted

Hi folks

I took a look at this - the entry ARRv3_0 does not have a signature check block in the feed, so it shouldn't be getting stuck here.  Are you running WebPI 5.1?  I also tried installing it on my Windows 10 client (sorry , I don't have access to the Windows Server box) and it installed correctly with no signature download failure.  So I'm not exactly sure what is happening for those users seeing this error.  

Thanks

Chris

Answer 13

User-1973986724 posted

Neat. I opened a ticket with MS support and they confirmed there is an issue-

We have observed that WPI shows the old release date for ARR3.0 which is 5/27/2015.

There is known issue with ARR 3 released on 5/27/2015 which is listed in Web PI. ARR PG is working on the fix.

Work around: Use MSI/Offline installer to install the latest version of ARR3.0.

Download Microsoft Application Request Routing 3.0 (x64) from Official Microsoft Download Center Download Microsoft Application Request Routing 3.0 (x86) from Official Microsoft Download Center

 

We will keep you posted once we get the updates from our ARR product team..

Please feel free to reach out to me in case of any questions or concerns.

I asked when the fix would be available they have no ETA.

Answer 14

User-356733082 posted

I edited my script above to include the paths (these are just the default install paths). Hopefully that works for you.

Absolutely awesome cheers hemac, that did the trick for me!!   Think I'll leave that Web Platform Installer well alone for the future now, it's caused nothing but grieve ever since I laid eyes on it :D 

Answer 15

User-661119054 posted

Hi any update on this?

Thanks

Answer 16

User-34672004 posted

Install completed (Failure): 'Application Request Routing 3.0'
ARRv3_0 : Failed.
Downloaded file failed signature verification and may have been tampered with

As a side note, I saw the same error with webPlatformInstaller 5.0.   After updating to webPI 5.1 ARR installs successfully.

I updated from here: https://www.microsoft.com/web/downloads/platform.aspx -> this download is 5.1 even though the page says 5.0.