COMODO Internet Security 2025 Premium Certificate is Revoked, what should we do?

Windows is blocking CIS instalation in free and pro version sending screens shot


1 Like

The problem you are experiencing is the problem of revoking COMODO’s digital certificate.
This topic below talks about this. Please read it and it will help you. :sweat_smile:

2 Likes

As I told earlier CIS 2025 installed on Win11 was working perfectly until recently. I’ve checked the certificates of CIS 2025 main files; all are recognized valid by Windows.
Then I’ve restore an image of my system prior to Win 11 September 2024 update and CIS 2025 is again working flawlessly.

So I think we have in fact 2 different problems to solve:

  • CIS 2025 existing installations have been tampered with by windows update or became incompatible after the update
  • CIS 2025 installer has its certificate revoked
3 Likes

I’m going with the second option: “The CIS 2025 installer has its certificate revoked”

1 Like

I work with all the options.

I had to uninstall Comodo CIS and I’m waiting for the patch to reinstall.

1 Like

Unfortunately, I think it’s a waste of time…

It feels like a game…

1 Like

Sorry Loyisa, I didn’t have any Egyptian hieroglyphs to hand. :sweat_smile:

Thank you Prodex for the translation.
You’re a real gentleman!

1 Like

tried in safemode, reboot, doesn’t work, same as before

Comodos chat support is telling me that this is a rare issue and its Microsofts fault, this sounds like complete cr@p to me.

1 Like

It doesn’t matter whose fault it is, needs a result.
CIS Cleanup Tool 3.3.0.95 has been released, signed with a valid certificate instead of 3.2.0.84 with revoked one. What prevents to do the same with the Comodo Internet Security 2025?

4 Likes

If anything, this should show the inherent unreliability of cloud based cert authorities, and current Windows OS over-reliance on such technologies. While something like the Crowdstrike incident is a bit different, there are some take-away lessons from it that can be applied broadly, but it seems those lessons havent been learned by many.

My company is currently evaluating endpoint security solutions, Comodo is one of the products on the list, this will ding its overall score pretty badly. Regardless of whos ‘fault’ it is, the ability to correct such a situation in a timely manner is a critical metric.

Right now I am messing around with the CRL in Win10 to see if I can get around the installer failure. Temporarily have the particular PC disconnected from the network so it doesnt lookup/update, etc. IF I can get it to work, I will post the process as a work-around.

1 Like

CIS 2025 Installer isn’t the only Comodo product with a revoked certificate. Dragon setup.exe has also its certificate revoked.

2 Likes

I really agree with what you said, This situation of the revoked certificate is going beyond the limits. The time they said was 2 weeks, but it has been much longer. :thinking:

1 Like

Things are looking bad. So far, is there anyone who can tell us what’s going on with COMODO?
If you need help, call me, I’m here to help! :sweat_smile:

1 Like

Hi New_Style_xd,

"Thank you for reporting.
Let me check and update you . " (Usual response from Comodo teams)

Comodo’s problem is communication, not the product.

If they’d announced a one-month lead time from the outset, we wouldn’t be in this mess…
it’s better to announce a month and finish in three weeks than to announce two weeks and finish in four…

2 Likes

I don’t think “cloud based cert authorities” are to blame here. Windows requires drivers be signed with those expensive EV certificates these days. I’m more inclined to think that Comodo messed up and either their keys were hacked and used to sign malware, or they breached some clause of the TOS that resulted in this mess. You don’t just “accidentally” have a 500$+ certificate revoked like that, and it certainly does not take over 30 days to issue a new one, it’s something that at best takes 1-2 business days.

and as pointed out by @Xeno, there is a new CISCleanupTool( v3.3.0.95 ) that is signed with an EV R36 cert issued on 2024-09-15 just TWO days after this thread was created, which proves that they already had a new EV cert issued to them and all this waiting is unnecessary.

3 Likes

i i said multiple time. The fix will come at the end of the year

1 Like

Hello!

I buy/renew this year the subscription for CIS2024.
But now I want install the new 2025.
I have new computer. Never install the CIS (is in my old PC).
But, I ca not install. I read some problems here, but I hink my is new but… perhaps connected to forum.

When try install I have this problem in middle:
“cmdhtml.dll wasn´t properly signed. Installation aborted”
Is the same problem debated here? Or I can try other process?

I try run as administrator, mas Win11 not permit. I try, google… to solve the problem run as administrator but win not permit.

How I pay, some of you have some comodo email to send this also?

Thnak you

2 Likes

yes same problems, different weeks, no solution from comodo. You need to wait and pray.

2 Likes

Didnt say they were to blame, it just shows an inherent flaw in the overall system, and Windows over-relying on such tech. The revoked cert impacted a lot of systems, systems that were otherwise secured, but either stopped functioning properly, and/or couldnt be reinstalled (and still cant). In this case, many now dont have their normal means of system security. This revoked cert, regardless of why/how it was revoked, ended up compromising security rather than protecting anything. In the absence of any other legitimate evidence/communication, the observable effect is the only valid conclusion.

3 Likes