A certificate chain processed, but terminated in a root certificate that is not trusted by the trust provider

Today, I encountered this problem when installing .Net Framework 4.7 on a Windows 2008 system. In fact, I tried to install .Net Framework 4.8 before and it worked fine, but my friend insisted on installing 4.7 and encountered this problem, so I recorded it for my convenience next time. The operating system is Windows 2008 Standard Edition. I downloaded the official .Net Framework 4.7.2 offline installation package. During the installation process, it could not be completed and an error message was received: The certificate chain was processed, but terminated in a root certificate that is not trusted by the trusted provider. As shown below:

This is mainly because there is no corresponding trusted certificate in the system and the certificate needs to be imported.

First download the Microsoft certificate and save it: http://download.microsoft.com/download/2/4/8/248D8A62-FCCD-475C-85E7-6ED59520FC0F/MicrosoftRootCertificateAuthority2011.cer

Then start, run, MMC, open the console.

Then, as shown above, click File, Add and Delete Snap-in, select the certificate on the left, and add it (as shown below)

In the confirmation window, select "Computer Account"

The next step is the default. After completion, return to the console and expand Certificates → Trusted Root Certification Authorities → Certificates.

Then on the right side of the page, under Certificate, click More Actions, All Tasks, Import.

Select the Microsoft certificate we downloaded in the first step. After the import is successful, install .Net Framework4.7.2 again. It should be successful without any problems.