You cannot distribute or install a software package in Windows Server 2003 if the software package contains a very large signed file

You cannot distribute or install a software package in Windows Server 2003 if the software package contains a very large signed file. This problem typically occurs when the signed file is larger than 500 megabytes. For example, you may experience the following symptoms:

• Windows Server Update Services (WSUS) that is running on a Windows Server 2003-based server cannot deploy Windows Vista Service Pack 1 to the clients.
• Game manufacturers cannot distribute games that have large signed files.

Note This problem also occurs in Windows XP.

This problem occurs because the WinVerifyTrust function in Windows Server 2003 cannot validate the certificates for large signed files.

Update information

To resolve this problem, download the update for Windows Server 2003.

The following files are available for download from the Microsoft Download Center:
For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base: Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Important This update supersedes an older update that was released with the same Microsoft Knowledge Base article number (938759). If you have already applied the old update, you must remove it, and then install the current update. To remove the old update, use the Add or Remove Programs item in Control Panel.

Prerequisites

To apply this update, you must have Windows Server 2003 Service Pack 1 or Windows Server 2003 Service Pack 2 installed on the computer. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Restart requirement

You must restart the computer after you apply this update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Server 2003 with Service Pack 1, x86-based versions

Windows Server 2003 with Service Pack 2, x86-based versions

Windows Server 2003 with Service Pack 1, Itanium-based versions

Windows Server 2003 with Service Pack 2, Itanium-based versions

Windows Server 2003, x64-based versions

Windows Server 2003 with Service Pack 2, x64-based versions

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Known issues

If you upgrade Microsoft Windows 2000 to Windows Server 2003 by using a Windows Server 2003 installation package that is integrated with this upgrade, the upgrade will fail.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: