diff --git a/images/win/scripts/Installers/Install-RootCA.ps1 b/images/win/scripts/Installers/Install-RootCA.ps1 index 824b2b465..cd3a46425 100644 --- a/images/win/scripts/Installers/Install-RootCA.ps1 +++ b/images/win/scripts/Installers/Install-RootCA.ps1 @@ -2,23 +2,21 @@ $sstFile = "$env:TEMP\roots.sst" # Generate SST from Windows Update $result = certutil.exe -generateSSTFromWU $sstFile -if ($LASTEXITCODE -eq 0) { - # Dump certificates - $result = certutil.exe -dump $sstFile - if ($LASTEXITCODE -eq 0) { - # Import Root CA into "Trusted Root Certification Authority" - try { - Import-Certificate -FilePath $sstFile -CertStoreLocation Cert:\LocalMachine\Root - } catch { - Write-Host "[Error]: failed to import ROOT CA`n$_" - } - } - else { - Write-Host "[Error]: failed to dump $sstFile sst file`n$result" - } -} -else { +if ($LASTEXITCODE -ne 0) { Write-Host "[Error]: failed to generate $sstFile sst file`n$result" + exit $LASTEXITCODE +} + +$result = certutil.exe -dump $sstFile +if ($LASTEXITCODE -ne 0) { + Write-Host "[Error]: failed to dump $sstFile sst file`n$result" + exit $LASTEXITCODE +} + +try { + Import-Certificate -FilePath $sstFile -CertStoreLocation Cert:\LocalMachine\Root +} catch { + Write-Host "[Error]: failed to import ROOT CA`n$_" + exit 1 } -exit $LASTEXITCODE \ No newline at end of file