topic Re: Media Services Interface Silent install in Collaboration Applications

Media Services Interface Silent install

edmund_tan — Sun, 17 Mar 2019 22:53:07 GMT

Hi All,

This issue has been raised before here https://supportforums.cisco.com/thread/2206654

however there is still no permenant solution to it yet. Basically when trying to perform a silent install on Media Services Interface,

it would always prompt user to accept and install a certificate for this. However upon installation i can't seem to find the certificate

anywhere in the local machine. I'd like to mass deploy Jabber along with Media Services Interface and getting a prompt during

installation is not acceptable.

Appreciate it if anyone could suggest a solution for this.

Re: Media Services Interface Silent install

florian.kroessbacher — Wed, 22 Jan 2014 22:33:17 GMT

Hy,

the certificate is in the msi.sys (systemdrive\windows\system32\drivers). Do a rigth click and i think its the second tab you see the signature.
There u can export the certificate to a file. With this CertFile u can import it with certutil into the local machine cert store, and the installation will run silent without prompt.
If we do a deinstall silent, we remove the cert from the local cert store with certutil remove "serialnumber"

hope it helped u
if so please rate

Media Services Interface Silent install

edmund_tan — Thu, 23 Jan 2014 04:19:23 GMT

Hi Florian,

Found the cert. Its' actually msidriver.sys (on windows 7 Pro) , nonetheless i installed the cert, tried installing Media Service Interface silently but still prompting user to accept the installation. Am i suppose to place the certificate in any folder specifically ?

Media Services Interface Silent install

Florian Kroessbacher — Thu, 23 Jan 2014 10:05:16 GMT

we are doing the following for installation

First:

certutil -addstore trustedpublisher "CISCO MEDIA SERVICE ENGINE CERTNAME"

Second:

msiexec.exe /i "XXX.msi" /qb-! /norestart /L* "LOGFILEPATH\LOGFILENAME"

For Uninstalling we are doing

First:

msiexec.exe /x {PRODUCTCODE} /qb-! /norestart /L* "LOGFILEPATH\LOGFILENAME"

Second:

certutil -delstore trustedpublisher "1ce9dfd555635676e30a400a492ad84a"

1ce9dfd555635676e30a400a492ad84a -> SerialNumber of the CERT

cheers Floh

Media Services Interface Silent install

edmund_tan — Thu, 23 Jan 2014 10:40:30 GMT

Ahh the trusted publisher folder. Works like a charm now! Thanks a bunch! Though a quick question, the cert expires on December 2014, is there anyway to renew that certificate?

Media Services Interface Silent install

Florian Kroessbacher — Thu, 23 Jan 2014 10:43:29 GMT

The renew of the Certificate has to be done from Cisco when the are doing the Driver Signing

But i think if it's in the Store then the Installation we go through anytime

cheers

Media Services Interface Silent install

edmund_tan — Thu, 23 Jan 2014 11:05:07 GMT

Splendid! Thank you very much Florian! You're a life savier!

Is this is self signed

Rene Charbonneau — Tue, 08 Jul 2014 11:22:28 GMT

Is this a self signed certificate or is there some kind of root or subordinary CA (Certificate Authority) which issued the certificate that is used to sign the driver/code? Because in my opinion it is the better way to add those certificates to the necessary truststore (Java, Windows, Linux, ...) then the issued code signing certificate...

Re: Media Services Interface Silent install

extraco — Wed, 27 Jun 2018 14:26:34 GMT

We had to install KB2921916, which is a SHA-2 Code Signing Support for Windows 7 and Windows Server 2008 R2 (NOTE: Not a standard update), in order to get this to work silently with the cert installed in the Trusted Publisher store. Otherwise, we would continue to get prompted, even though the cert was installed.