Manually Importing Root Code Signing Certificates - Windows
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Overview
The SourceTree application and its installer are digitally 'signed' to ensure users can trust where it came from. This signature is usually validated by automatically following a chain of trust back to a Trusted Root Certificate Authority (CA). Depending on the configuration of the host OS it is then possible to prevent an application from running when is either unsigned or where the signature cannot be validated against a Trusted CA.
In most circumstances the Trusted Root Certificate should already be installed in the OS.
NB. SourceTree switched from using a digital signature reliant on a Thwate Root Certificate from here, https://www.thawte.com/roots/, to one using a DigiCert Root Certificate from here, https://www.digicert.com/digicert-root-certificates.htm, for v1.6.13 onwards.
Problem
When installing SourceTree if the OS is unable to validate the digital signature then the installation will fail with a message similar to this:
1
A file that is required cannot be installed because the cabinet file C:\ProgramData\Atlassian\SourceTree #.#.#\install\disk1.cab has an invalid digital signature. This may indicate that the cabinet file is corrupt.Workaround
Download the DigiCert Assured ID Root CA from here: https://www.digicert.com/CACerts/DigiCertAssuredIDRootCA.crt
Double click on DigiCertAssuredIDRootCA.crt, this will open a new dialog.
Check and click Install Certificate
It should then be possible to re-run and complete the SourceTree installation.
Was this helpful?