MsiPatchCertificate Table

The MsiPatchCertificate Table identifies the possible signer certificates used to digitally sign patches. The MsiPatchCertificate Table contains the information that is needed to enable User Account Control (UAC) Patching for an application.

The MsiPatchCertificate Table has the following columns:

Column Type Key Nullable
PatchCertificate Identifier Y N
DigitalCertificate_ Identifier N N

 

Columns

PatchCertificate

The unique identifier for this row in the MsiPatchCertificate Table.

DigitalCertificate

An external key into the first column of the MsiDigitalCertificate Table. The row indicated in the MsiDigitalCertificate Table contains the binary representation of the signer certificate.

Remarks

Patches are always evaluated against the MsiPatchCertificate Table that is current at the time the patch is applied. A patch can modify the MsiPatchCertificate Table by adding or removing entries. This enables a patch to modify the evaluation of future patches that are applied later in the patching sequence. Multiple certificates can exist in the table, and the patch must match at least one certificate to be applied.

Validation

ICE03
ICE06
ICE32
ICE81

DisableLUAPatching

User Account Control (UAC) Patching

MSIDISABLELUAPATCHING

Digital Signatures and Windows Installer

Not Supported in Windows Installer 2.0 and earlier