The "certificate chain processed but terminated in a root certificate" error occurs on Windows 7 because the operating system lacks the modern root certificates and SHA-2 code signing support required to verify newer .NET Framework installers.
If the manual import does not resolve the issue, ensure these components are also addressed: net framework 4.7 2 windows 7 certificate chain error
You might also need the DigiCert Global Root CA or Baltimore CyberTrust Root , depending on the exact signing chain. If the error persists, use the Certificates MMC ( certlm.msc ) to view the signature of the .NET installer exe (right-click > Properties > Digital Signatures > Details > View Certificate > Certification Path). The missing certificate will be highlighted with a red X. Step 1: Install SHA-2 Code Signing Support The
Back at the workstation, Elias manually imported the certificates into the Trusted Root Store. He watched the "Success" dialog boxes pop up, one by one. He felt like he was teaching an old dog new tricks, or more accurately, giving a nearsighted man a new pair of glasses. The missing certificate will be highlighted with a red X