When trying to install an AppSense agent (this issue has been observed with AM 8.9 SP3 and EM 8.6 agents) the installation fails. On examining the MSI logs you see log lines similar to below:
DIFXAPP: INFO: AsModLdr.inf: checking signature with catalog 'C:\Program Files\AppSense\AsModLdr\AsModLdr.cat' ...
DIFXAPP: ERROR: Signature verification failed while checking integrity of driver package 'AsModLdr.inf' ('C:\Program Files\AppSense\AsModLdr\AsModLdr.inf'). (Error code 0x800B0109: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider.)
DIFXAPP: ERROR: encountered while installing driver package 'C:\Program Files\AppSense\AsModLdr\AsModLdr.inf'
DIFXAPP: ERROR: InstallDriverPackages failed with error 0x800B0100
This behaviour has been shown to occur when Entrust Entelligence software is installed on the client. It seems that the Entrust software has a problem with validating the certificate used to sign the AppSense agent files in the MSI package (the AppSense certificate is valid although expired). To work around this issue, uninstall or disable the Entrust software before installing the AppSense agent.
Note: This issue is similar to that described in the following article, therefore it seems that the Entrust software is interfering with the validation of the root certificate: MSI installer fails with 1603