.NET 4.7.2 with Wix installer fails with : Failed to verify signature of payload: NetFx472Redist

[rekhasasidharan]

After bundling the my application with .NET framework 4.7.2 and installing it I am seeing an error

Error 0x80070490: Failed to find expected public key in certificate chain.
[0D20:06EC][2021-08-20T21:22:38]e000: Error 0x80070490: Failed to verify expected payload against actual certificate chain.
[0D20:06EC][2021-08-20T21:22:38]e000: Error 0x80070490: Failed to verify signature of payload: NetFx472Redist
[0D20:06EC][2021-08-20T21:22:38]e310: Failed to verify payload: NetFx472Redist at path: C:\ProgramData\Package Cache.unverified\NetFx472Redist, error: 0x80070490. Deleting file.

Appreciate if anyone help me out to find if I am missing something to add in the project. Where I need to manage element referring the PackageGroupRef.

The snippet of code I have tried out is

string productMsi = project.BuildMsi();

     var bootstrapper =
         new Bundle("My_Installer",
             new PackageGroupRef("NetFx472Redist"), new MsiPackage(productMsi) { DisplayInternalUI = false, Compressed = true });

     bootstrapper.Version = project.Version;
     bootstrapper.OutFileName = "My_Installer.msi";
     bootstrapper.WxsFiles.Add(@"wix\NetFx472.wxs");
     bootstrapper.Include(WixExtension.NetFx);
     bootstrapper.Include(WixExtension.Util);
     bootstrapper.Build();

And the NetFx472.wxs file is managed as

WIXNETFX4RELEASEINSTALLED >= "#$(var.NetFx472MinRelease)"

  <WixVariable Id="WixMbaPrereqPackageId" Value="NetFx472Web" />
  <WixVariable Id="WixMbaPrereqLicenseUrl" Value="$(var.NetFx472EulaLink)" Overridable="yes" />
  <WixVariable Id="NetFx472WebDetectCondition" Value="NETFRAMEWORK45 &gt;= $(var.NetFx472MinRelease)" Overridable="yes" />
  <WixVariable Id="NetFx472WebInstallCondition" Value="" Overridable="yes" />
  <WixVariable Id="NetFx472WebPackageDirectory" Value="redist\" Overridable="yes" />

  <PackageGroup Id="NetFx472Web">
     <ExePackage
         InstallCommand="/q /norestart /ChainingPackage &quot;[WixBundleName]&quot; /log &quot;[NetFx472FullLog].html&quot;"
         RepairCommand="/q /norestart /repair /ChainingPackage &quot;[WixBundleName]&quot; /log &quot;[NetFx472FullLog].html&quot;"
         UninstallCommand="/uninstall /q /norestart /ChainingPackage &quot;[WixBundleName]&quot; /log &quot;[NetFx472FullLog].html&quot;"
         PerMachine="yes"
         DetectCondition="!(wix.NetFx472WebDetectCondition)"
         InstallCondition="!(wix.NetFx472WebInstallCondition)"
         Id="NetFx472Web"
         Vital="yes"
         Permanent="yes"
         Protocol="netfx4"
         DownloadUrl="$(var.NetFx472WebLink)"
         LogPathVariable="NetFx472FullLog"
         Compressed="no"
         Name="!(wix.NetFx472WebPackageDirectory)NDP472-KB4054531-Web.exe">
        <RemotePayload
          CertificatePublicKey="C090C1A2CAFA9B967D9C87C7FE02F7C01FBDE4F2"
          CertificateThumbprint="5EAD300DC7E4D637948ECB0ED829A072BD152E17"
          Description="Microsoft .NET Framework 4.7.2 Setup"
          Hash="507ECDADC23A27C2283BA130A2AA51650E6BC05B"
          ProductName="Microsoft .NET Framework 4.7.2"
          Size="1447320"
          Version="4.7.3062.0" />
     </ExePackage>
  </PackageGroup>

  <WixVariable Id="WixMbaPrereqPackageId" Value="NetFx472Redist" />
  <WixVariable Id="WixMbaPrereqLicenseUrl" Value="$(var.NetFx472EulaLink)" Overridable="yes" />
  <WixVariable Id="NetFx472RedistDetectCondition" Value="NETFRAMEWORK45 &gt;= $(var.NetFx472MinRelease)" Overridable="yes" />
  <WixVariable Id="NetFx472RedistInstallCondition" Value="" Overridable="yes" />
  <WixVariable Id="NetFx472RedistPackageDirectory" Value="redist\" Overridable="yes" />

  <PackageGroup Id="NetFx472Redist">
     <ExePackage
         InstallCommand="/q /norestart /ChainingPackage &quot;[WixBundleName]&quot; /log &quot;[NetFx472FullLog].html&quot;"
         RepairCommand="/q /norestart /repair /ChainingPackage &quot;[WixBundleName]&quot; /log &quot;[NetFx472FullLog].html&quot;"
         UninstallCommand="/uninstall /q /norestart /ChainingPackage &quot;[WixBundleName]&quot; /log &quot;[NetFx472FullLog].html&quot;"
         PerMachine="yes"
         DetectCondition="!(wix.NetFx472RedistDetectCondition)"
         InstallCondition="!(wix.NetFx472RedistInstallCondition)"
         Id="NetFx472Redist"
         Vital="yes"
         Permanent="yes"
         Protocol="netfx4"
         DownloadUrl="$(var.NetFx472RedistLink)"
         LogPathVariable="NetFx472FullLog"
         Compressed="no"
         Name="!(wix.NetFx472RedistPackageDirectory)NDP472-KB4054530-x86-x64-AllOS-ENU.exe">
        <RemotePayload
          CertificatePublicKey="C090C1A2CAFA9B967D9C87C7FE02F7C01FBDE4F2"
          CertificateThumbprint="5EAD300DC7E4D637948ECB0ED829A072BD152E17"
          Description="Microsoft .NET Framework 4.7.2 Setup"
          Hash="D3A416DC5FC75758D41B4C0158ACA69270D2A904"
          ProductName="Microsoft .NET Framework 4.7.2"
          Size="71607232"
          Version="4.7.3062.0" />
     </ExePackage>
  </PackageGroup>

[rseanhall]

Did you see the existing discussions about this at #6441 and #6528?

[rekhasasidharan]

Yes. It is helpful .