| Previous | Next |
| SPAPI_E_AUTHENTICODE_TRUST_NOT_ESTABLISHED | SPAPI_E_SIGNATURE_OSATTRIBUTE_MISMATCH |
SPAPI_E_AUTHENTICODE_PUBLISHER_NOT_TRUSTED
SPAPI_E_AUTHENTICODE_PUBLISHER_NOT_TRUSTED (0x800F0243) means that SetupAPI evaluated an Authenticode-signed catalog and the catalog publisher was not established as trusted. The diagnostic target is the exact INF/catalog signature and publisher trust decision, not Authenticode technology in general.
What to inspect
- The INF and catalog file selected for the device/software package and the publisher certificate that signed the catalog.
- The signature and certificate chain Windows actually validated, including the trust store and policy in the installation context.
- Whether the package expected a different catalog, was modified after signing, or is being installed under policy that does not trust that publisher.
Related SetupAPI results
SPAPI_E_AUTHENTICODE_TRUST_NOT_ESTABLISHED is a neighboring trust result, while SPAPI_E_AUTHENTICODE_TRUSTED_PUBLISHER identifies a trusted-publisher outcome. Preserve the exact HRESULT instead of reducing all three to “signature problem.”
Recovery
Use a correctly signed package from the intended publisher and establish trust only through the organization’s approved certificate/publisher policy. Do not disable signature enforcement simply to make the installation proceed; that bypasses the condition the HRESULT is reporting.
Technical references
Looking for a different code? Search another status or error code.