How to fix Error 1303 on Windows 11

by

Why This Error Happens

Error 1303 typically occurs during MSI installer operations when the Windows Installer service lacks sufficient permissions to write to the registry or encrypt/decrypt data using the current user’s security context. This is commonly triggered when the installation is run under a different user profile than the one that owns the target directory, or when the “Everyone” permission group has been removed from the HKEY_LOCAL_MACHINE\SECURITY or user profile registry hives. Corrupted user profile encryption certificates (EFS-related) can also trigger this “well-known encryption key” fallback message.

Step-by-Step Resolution Guide

Step 1: Verify and Restore Folder/Registry Permissions

  • Navigate to the target installation directory (commonly C:\Program Files or C:\Users\<username>\AppData\Local\Temp).
  • Right-click the folder, select Properties > Security tab, and ensure “SYSTEM” and “Administrators” have Full Control.
  • Add the “Everyone” group back with Read & Execute permissions if it was previously removed.

Step 2: Run the Installer with Elevated/Correct User Context

  • Right-click the MSI installer file and select “Run as administrator.”
  • If using Command Prompt, run: msiexec /i "C:\path\to\installer.msi" /L*v log.txt to generate a verbose log for further diagnosis.
  • Confirm you are logged in with the same user account that will own the installed application files (avoid installing under a temporary or guest profile).

Step 3: Check and Repair User Profile Encryption Certificates

  • Open certmgr.msc and check the “Personal” store for a valid EFS certificate tied to your user account.
  • If corrupted or missing, run cipher /r:EFSBackup from an elevated Command Prompt to generate a new recovery certificate.
  • Re-import the certificate via certmgr.msc if a backup exists (.pfx file).

Step 4: Clear Temporary Installer Cache

  • Delete cached MSI files from C:\Windows\Installer (back up first) and %temp%.
  • Restart the Windows Installer service via services.msc, locating “Windows Installer” and clicking “Restart.”

Alternative or Verification Steps

  • To verify the fix, re-run the installer and monitor the Event Viewer (eventvwr.msc) under Windows Logs > Application for a successful MsiInstaller event with no Error 1303 entry.
  • If the issue persists, create a new local user profile with administrator rights and attempt the installation from that clean profile to rule out corrupted user-specific encryption data.