Install certificates needed for Visual Studio offline installation

+

Install certificates needed for Visual Studio offline installation

+

+

+

1. Copy the Certificate Manager Tool (certmgr.exe) to the installation share (for example, \\server\share\vs2017). certmgr.exe is not included as part of Windows itself, but is available as part of the Windows SDK.

2. Create a batch file with the following commands:

   cmdCopy

   certmgr.exe -add -c certificates\manifestSignCertificates.p12 -n "Microsoft Code Signing PCA 2011" -s -r LocalMachine CA
   
   certmgr.exe -add -c certificates\manifestSignCertificates.p12 -n "Microsoft Root Certificate Authority" -s -r LocalMachine root
   
   certmgr.exe -add -c certificates\manifestCounterSignCertificates.p12 -n "Microsoft Time-Stamp PCA 2010" -s -r LocalMachine CA
   
   certmgr.exe -add -c certificates\manifestCounterSignCertificates.p12 -n "Microsoft Root Certificate Authority" -s -r LocalMachine root
   
   certmgr.exe -add -c certificates\vs_installer_opc.SignCertificates.p12 -n "Microsoft Code Signing PCA" -s -r LocalMachine CA
   
   certmgr.exe -add -c certificates\vs_installer_opc.SignCertificates.p12 -n "Microsoft Root Certificate Authority" -s -r LocalMachine root
   

3. Deploy the batch file to the client. This command should be run from an elevated process.

+

What are the certificates files in the certificates folder?

+

1. ManifestSignCertificates.p12 contains:
   • Intermediate certificate: Microsoft Code Signing PCA 2011
     • Not required. Improves performance in some scenarios if present.
   • Root certificate: Microsoft Root Certificate Authority 2011
     • Required on Windows 7 Service Pack 1 systems that do not have the latest Windows Updates installed.
2. ManifestCounterSignCertificates.p12
   • Intermediate certificate: Microsoft Time-Stamp PCA 2010
     • Not required. Improves performance in some scenarios if present.
   • Root certificate: Microsoft Root Certificate Authority 2010
     • Required for Windows 7 Service Pack 1 systems that do not have the latest Windows Updates installed.
3. vs_installer_opc.SignCertificates.p12
   • Intermediate certificate: Microsoft Code Signing PCA
     • Required for all systems. Note that systems that with all updates applied from Windows Update may not have this certificate.
   • Root certificate: Microsoft Root Certificate Authority
     • Required. This certificate ships with systems running Windows 7 or later.

+

Why are the certificates from the certificates folder not installed automatically?

+

Checking if certificates are already installed

+

• Run mmc.exe
• Click on File and select Add/Remove Snap-in
  • Double-click on Certificates, select Computer account and click Next
  • Select Local computer, click Finish, and click Ok
  • Expand Certificates (Local Computer)
  • Expand Trusted Root Certification Authorities and select Certificates
    • Check this list for the necessary root certificates.
  • Expand Intermediate Certification Authorities and select Certificates
    • Check this list for the required intermediate certificates.
• Click on File and select Add/Remove Snap-in
  • Double-click on Certificates, select My user account, click Finish and OK.
  • Expand Certificates – Current User
  • Expand Intermediate Certification Authorities and select Certificates
    • Check this list for the required intermediate certificates.

+

+

Install Visual Studio

+

See also

• Install Visual Studio
• Visual Studio administrator guide
• Use command-line parameters to install Visual Studio
• Visual Studio workload and component IDs

 

Customizing the network layout

+

• --add to specify workload or component IDs. If --add is used, only those workloads and components specified with --add will be downloaded. If --add is not used, all workload and components will be downloaded.
• --includeRecommended to include all the recommended components for the specified workload IDs
• --includeOptional to include all the recommended and optional components for the specified workload IDs.
• --lang to specify language locales.

+

+

• To download all workloads and components for only one language, run:
  vs_enterprise.exe --layout C:\vs2017offline --lang en-US
• To download all workloads and components for multiple languages, run:
  vs_enterprise.exe --layout C:\vs2017offline --lang en-US de-DE ja-JP
• To download one workload for all languages, run
  vs_enterprise.exe --layout C:\vs2017offline --add Microsoft.VisualStudio.Workload.Azure --includeRecommended
• To download two workloads and one optional component for three languages, run:
  vs_enterprise.exe --layout C:\vs2017offline --add Microsoft.VisualStudio.Workload.Azure --add Microsoft.VisualStudio.Workload.ManagedDesktop --add Component.GitHub.VisualStudio --includeRecommended --lang en-US de-DE ja-JP
• To download two workloads and all of their recommended components, run:
  vs_enterprise.exe --layout C:\vs2017offline --add Microsoft.VisualStudio.Workload.Azure --add Microsoft.VisualStudio.Workload.ManagedDesktop --add Component.GitHub.VisualStudio --includeRecommended
• To download two workloads and all of their recommended and optional components, run:
  vs_enterprise.exe --layout C:\vs2017offline --add Microsoft.VisualStudio.Workload.Azure --add Microsoft.VisualStudio.Workload.ManagedDesktop --add Component.GitHub.VisualStudio --includeOptional

+

Deploying from a network installation

+

• Users can install by running:
  \\server\products\VS2017\vs_enterprise.exe
• Administrators can install in an unattended mode by running:
  \\server\products\VS2017\vs_enterprise.exe --quiet --wait --norestart

+

Tip

+

Error codes

+

Value	Result
0	Operation completed successfully
3010	Operation completed successfully, but install requires reboot before it can be used
Other	Failure condition occurred - check the logs for more information

Updating a network install layout

+

How to create a layout for a previous Visual Studio 2017 release

+

+

How to get support for your offline installer

+

+

See also

• Install Visual Studio
• Visual Studio administrator guide
• Use command-line parameters to install Visual Studio
• Visual Studio workload and component IDs