CIS 12.2.2.8012 installation is bugged on Win7

A. CIS 12.2.2.8012 can’t install on Win7 in offline
Can you reproduce the problem & if so how reliably?:
Everytime
If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1:start installing CIS in offline (no Internet connection)
2:got error messages (look at attached screenshot No1)
3:installation aborted
One or two sentences explaining what actually happened:
n/a
One or two sentences explaining what you expected to happen:
n/a
If a software compatibility problem have you tried the advice to make programs work with CIS?:
n/a
Any software except CIS/OS involved? If so - name, & exact version:
n/a
Any other information, eg your guess at the cause, how you tried to fix it etc:
Tried to install it with active Internet connection but got another error message (look at screenshot No2)

B. YOUR SETUP
Exact CIS version & configuration:
12.2.2.8012
Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
n/a
Have you made any other changes to the default config? (egs here.):
no
Have you updated (without uninstall) from CIS 5, 6 or 7?:
no, fresh install
if so, have you tried a a a clean reinstall - if not please do?:
?
Have you imported a config from a previous version of CIS:
n/a
if so, have you tried a standard config - if not please do:
n/a
OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
VirtualBox 6.0.24, Win7 SP1 x64 fresh install, updated to 31.12.2017, required updates (kb4474419, kb4490628, kb3033929) installed too
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
no

Did you ensure the below were installed first? as indicated here: [url=https://forums.comodo.com/news-announcements-feedback-cis/comodo-internet-security-2020-v12228012-released-t126945.0.html[/url]

Only for Windows 7 users

Before you install new CIS release or update from previous version you need to install following Windows updates. These packages are necessary for installation of CIS on Windows 7.

[url=https://www.catalog.update.microsoft.com/search.aspx?q=kb4474419]https://forums.comodo.com/news-announcements-feedback-cis/comodo-internet-security-2020-v12228012-released-t126945.0.html[/url]

Only for Windows 7 users

Before you install new CIS release or update from previous version you need to install following Windows updates. These packages are necessary for installation of CIS on Windows 7.

Microsoft Update Catalog]Microsoft Update Catalog]Comodo Forum

Only for Windows 7 users

Before you install new CIS release or update from previous version you need to install following Windows updates. These packages are necessary for installation of CIS on Windows 7.

https://www.catalog.update.microsoft.com/search.aspx?q=kb4474419
https://www.catalog.update.microsoft.com/search.aspx?q=kb4490628
https://www.microsoft.com/en-us/download/details.aspx?id=46148

Of course, as described above:

And even more: I tried two ways, with the necessary patches and without them, but the result is the same.

Oh, okay.

Did you run the Uninstaller tool before trying to do the fresh install?

I’m presuming your using the offline installer and will have deleted temporary files.

There are no previous installations of CIS. Tried to install it on clean system.

Okay.

Looks like it part installs and then runs into an error. Have you tried redownloading the offline installer and installing it with the original file name? I don’t have win 7 on my machine but trying to narrow down the issue.

Looks like those updates are not installed properly otherwise windows would recognize them as valid certificates, you can check with sigcheck from sysinternals and issue sigcheck -i “path to Comodo driver” e.g. C:\windows\system32\drivers\cmdguard.sys. You may need to update and install the latest trusted root certificates from http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab

Updates was installed properly. Problem was in absent certificates. authroot.stl didn’t install properly because invalid digital sign (see screenshot).
Problem was solved by another way:

  1. got roots.sst by command: certutil.exe -generateSSTFromWU roots.sst (at this step internet connection needs)
  2. updated trusted root certificates by command: updroots.exe roots.sst (with administrative privilegies)

Maybe needs add this remark to Win7 users to download page?

If you right-click on authroot.stl and select install CTL, it will still install the certificates even with that invalid certificate error. But it all comes down to Windows 7 needs to be updated for CIS to install correctly.

It didn’t install certificates but only certificate trust list (pic for example):


and it didn’t solve problem described earlier.

Win7 don’t need to be updated since Jan 2018 (imho), sha2 support and current root certificates are enough to install CIS.
Now the problem is solved, everything works.
(thanks for the certificate hint, I missed this point. :wink: )