Share via

Can't install Visual Studio 2019 Community - Certificate Error?

gat 1024 96 Reputation points
2021-01-14T22:03:27.593+00:00

Hi, I'm trying to install VS 2019 on Windows 10, but I can't even get past the initial "fetching..." screen.

In checking the logs I find messages:

  • 'The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.'
  • 'The remote certificate is invalid according to the validation procedure.'

These messages occur when the installer attempts to download:

I can go to those links in Firefox and the channel files download just fine. When I go to these URLs in Edge, I get: NET:ERR_CERT_COMMON_NAME_INVALID

Looks like the common name (aka.ms) does not match the issued name (frontier-dev.amazon.com). Is this right? Is that really the certificate? If so, it seems like there is some new policy in Windows or the NET webclient to reject this situation.

So what should I do? Is there any way to ignore certificate errors, albeit temporarily? If that's not the problem, then are there any other ideas or solutions?

Thanks in advance!

Visual Studio Setup
Visual Studio Setup
Visual Studio: A family of Microsoft suites of integrated development tools for building applications for Windows, the web and mobile devices.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
1,009 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,840 questions
0 comments
Accepted answer
  1. gat 1024 96 Reputation points
    2021-01-15T16:23:41.483+00:00

    In thinking about it a little more, this is what I think I've found.

    The problem is DNS. My DNS resolver is Cloudfare which resolves aka.ms to 184.87.56.190. Using Cloudfare, the cert returned for aka.ms is issued to frontier-dev.amazon.com. Checking a different resolver yields one of several different addresses whose site provides a certificate issued to go.microsoft.com.

    Edge give a warning but still downloads using this certificate. So I think, changing the DNS from Cloudfare should solve the problem. I will give it a shot and report if it works.

    Thanks for all the help!

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anna Xiu-MSFT 27,891 Reputation points Microsoft Vendor
    2021-01-15T03:27:08.94+00:00

    Hi @gat 1024 ,

    Welcome to Microsoft Q&A!

    Please try the following steps:

    1. Go to your Windows Update and make sure that all pending and recommended windows updates are installed.
    2. Reboot your computer
    3. Download the Visual Studio from the download page and run it as administrator

    Sincerely,
    Anna

    • If the answer is helpful, please click "Accept Answer" and upvote it.
      Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.