Make sure you do the following: Download and install the CMA certificate. Update the root certificates of Microsoft and VeriSign. This is usually not necessary if you use a fully updated version of Windows.