Error message when you install a Windows 2000 service pack or product update (281458)

SYMPTOMS

When you install a service pack or product update (for example, a critical update, a security patch, an update, or a hotfix) on a Windows 2000-based computer, you may receive an error message that is similar to the following:

Service Pack Setup Error
Failed to install catalog files
OK

KB123456 Setup Error
Setup could not verify the integrity of the file Update.inf. Make sure the cryptographic service is running on this computer.
OK

CAUSE

This problem may occur if any of the following conditions is true:

Option 10, "Only trust items found in the trust DB," of the software publishing state key values has been changed to TRUE (the default setting is FALSE).

NOTE: To check the setting for Option 10, type setreg at a command prompt. or

The "Microsoft Root Authority" certificate or the "NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc." certificate under Trusted Root Certification Authorities has been removed. or

%SYSTEMROOT%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT file is corrupted.

RESOLUTION

To resolve the problem if Option 10 has been changed, type setreg 10 FALSE at a command prompt.

To resolve the problem if certificates have been removed, follow these steps:

On a computer that has the Microsoft Root Authority certificate installed, follow these steps:
1. Start Microsoft Internet Explorer.
2. On the Tools menu, click Internet Options.
3. Click the Content tab, and then click Certificates.
4. Click the Trusted Root Certification Authorities tab.
5. Scroll down until you locate Microsoft Root Authority certificate.
6. Click Export.
7. Follow the prompts to export the certificate to DER encoded Binary x.509(.CER)file
On the computer on which you cannot install the service pack or hotfix, import the certificate that you saved into the Trusted Root Certification Authorities.

To resolve the problem if the NT5INF.CAT file is damaged or corrupted, follow these steps:

Use the EXPAND tool to expand NT5INF.CA_ to NT5INF.CAT.

Note The Nt5inf.ca_ file is located on the Windows 2000 Setup disk in the i386 folder.
Restart in safe mode, and then replace %SYSTEMROOT%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\NT5INF.CAT and %SYSTEMROOT%\system32\dllcache\nt5inf.cat with the expanded file.NOTE: To view %SYSTEMROOT%\system32\dllcache\nt5inf.cat, in Windows Explorer, on the Tools menu, click Folder Options, and then click the View tab. Click to select Show hidden files and folders, and then click to clear Hide extensions for known file types and Hide protected operating system files.