New Post: Use a real certificate (from CA)

April 2, 2015, 12:07 pm

≫ Next: New Post: Use a real certificate (from CA)

≪ Previous: New Post: Use a real certificate (from CA)

Hi,

2015-04-02 20:31:08:041 1088 1028 Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\Download\40f14bfb56c3cc146413561e743e5792\9ed26d98-f97d-4725-b9a2-c284f3e8e4e7_1.cab are not trusted: Error 0x800b0004

Does your client computer trust your home made certificate ? Looks like the answer is no !

↧

New Post: Use a real certificate (from CA)

April 2, 2015, 12:12 pm

≫ Next: New Post: Use a real certificate (from CA)

≪ Previous: New Post: Use a real certificate (from CA)

It's not a home made certificate. I requested it from my CA and I had to wait more than a month to get the code signin format.

Is Wsus Package Publisher able to work without deploying the server certificate to all my clients??

↧

New Post: Use a real certificate (from CA)

April 2, 2015, 1:17 pm

≫ Next: New Post: consternate WPP

≪ Previous: New Post: Use a real certificate (from CA)

Can you deploy the code signing certificate in the trusted Publisher cert store on the client machine? Does it work then?

Regards
Norbert

↧

New Post: consternate WPP

April 2, 2015, 1:44 pm

≫ Next: New Post: Use a real certificate (from CA)

≪ Previous: New Post: Use a real certificate (from CA)

Hi Sirko,

you need to configure this Setting:
"Neues Update veröffentlichen "Das Update immer in der WSUS-Konsole sichtbar machen..." oder "Immer wählen".
Than restart WPP or do click the reconnect button.

After this you should be able to delete the empty product/category.

HTH
Norbert
PS: Mentioned here https://wsuspackagepublisher.codeplex.com/discussions/471290

↧

New Post: Use a real certificate (from CA)

April 3, 2015, 1:11 am

≫ Next: New Post: Use a real certificate (from CA)

≪ Previous: New Post: consternate WPP

Yes it works.
But my goal isn't to deploy the cert to all clients. Is there something more to do on the server to make it work?
Plus the cert expires every 3 years so I'd have to redeploy It again and we don't have AD.

↧

New Post: Use a real certificate (from CA)

April 3, 2015, 2:47 am

≫ Next: New Post: HOW TO: Deploy Java 8 (while uninstalling previous versions)

≪ Previous: New Post: Use a real certificate (from CA)

HiDoo wrote:

Yes it works.
But my goal isn't to deploy the cert to all clients. Is there something more to do on the server to make it work?
Plus the cert expires every 3 years so I'd have to redeploy It again and we don't have AD.

But all Clients/Servers need the certificate. Without certificate they can not install updates from WPP.

↧

New Post: HOW TO: Deploy Java 8 (while uninstalling previous versions)

April 16, 2015, 12:17 pm

≫ Next: New Post: HOW TO: Deploy Java 8 (while uninstalling previous versions)

≪ Previous: New Post: Use a real certificate (from CA)

The first screen allows you to define rules used by WUA to determine if the update is installed. The second screen allows you to define rules to determine if the update is installable (needed)

↧

New Post: HOW TO: Deploy Java 8 (while uninstalling previous versions)

April 16, 2015, 12:26 pm

≫ Next: Reopened Unassigned: Copie des règles pour maj remplaçante [255]

≪ Previous: New Post: HOW TO: Deploy Java 8 (while uninstalling previous versions)

nebulight wrote:

I like to have the ability to turn off auto update.

This is the reason for using Group Policys in this case.

By
Winfried

↧

Reopened Unassigned: Copie des règles pour maj remplaçante [255]

April 16, 2015, 3:28 pm

≫ Next: Commented Unassigned: Copie des règles pour maj remplaçante [255]

≪ Previous: New Post: HOW TO: Deploy Java 8 (while uninstalling previous versions)

↧

Commented Unassigned: Copie des règles pour maj remplaçante [255]

April 16, 2015, 3:41 pm

≫ Next: Edited Unassigned: Copie des règles maj remplaçante, Suite [255]

≪ Previous: Reopened Unassigned: Copie des règles pour maj remplaçante [255]

Bonjour,

Avec la v1.3.1504.12, une mise à jour remplaçante remplissais automatiquement les règles d'approbation et d'installation avec la version précédente.
Avec la v1.3.1411.09, actuellement, les règles ne sont plus copié.

PS dans le sous menu : remplaçante prend un c cédille.

Comments: Bonjour, Du coup je ré-ouvre et complète. Avec la V1.3.1504.15, quand on fait une mise à jour remplaçante d'un MSI par un autre MSI, l'ancien code devient de trop. On retrouve <msiar:MsiProductInstalled ProductCode="{GUID}"/> dans les règles. Seulement là, c'est celui de l'ancien MSI. Par contre, la métadonnée de fin est avec le bon GUID. Strange ^^ A bientôt

↧

Edited Unassigned: Copie des règles maj remplaçante, Suite [255]

April 16, 2015, 3:41 pm

≫ Next: Edited Unassigned: Copie des règles maj remplaçante, Suite [255]

≪ Previous: Commented Unassigned: Copie des règles pour maj remplaçante [255]

↧

Edited Unassigned: Copie des règles maj remplaçante, Suite [255]

April 16, 2015, 3:43 pm

≫ Next: New Post: Optional installation of third party software

≪ Previous: Edited Unassigned: Copie des règles maj remplaçante, Suite [255]

↧

New Post: Optional installation of third party software

April 17, 2015, 12:16 am

≫ Next: Created Unassigned: Crash while making custom update [264]

≪ Previous: Edited Unassigned: Copie des règles maj remplaçante, Suite [255]

I am not sure if this is a feature request, standard functionality or not possible at all but I just throw my idea into the group.

I have a working java 8 deployment. I want to install java on computer that I prefer, not for all the computer in the wsus group. If a approve the update for Optional Installation, the update is installed automatically instead of manually.

Should this be possible?

↧

Created Unassigned: Crash while making custom update [264]

April 17, 2015, 1:54 am

≫ Next: Commented Unassigned: Copie des règles maj remplaçante, Suite [255]

≪ Previous: New Post: Optional installation of third party software

↧

Commented Unassigned: Copie des règles maj remplaçante, Suite [255]

April 17, 2015, 3:18 am

≫ Next: Commented Unassigned: Crash while making custom update [264]

≪ Previous: Created Unassigned: Crash while making custom update [264]

Bonjour,

Avec la v1.3.1411.09, une mise à jour remplaçante remplissais automatiquement les règles d'approbation et d'installation avec la version précédente.
Avec la v1.3.1504.12, les règles ne sont plus copié.

PS dans le sous menu : remplaçante prend un c cédille.

Comments: C'est parce-que lorsque vous publié un nouveau MSI/MSP, WPP regarde si il y a des règles définies dans le fichier MSI/MSP. Si c'est la cas, les anciennes règles sont égrasées par les nouvelles. Si aucune règles n'est fournies, alors pas de changement, les anciennes règles restent inchangées.

↧

Commented Unassigned: Crash while making custom update [264]

April 17, 2015, 3:19 am

≫ Next: New Post: Optional installation of third party software

≪ Previous: Commented Unassigned: Copie des règles maj remplaçante, Suite [255]

Hello

Any idea, how i could find out whats wrong. When i try to make custom update, GUI crashes after adding "action" to the custom update.

Wsus version 3.2.7600.265

Wsus Packagepublisher Release v1.3.1504.15

Any help appreciated.
Comments: Can you send me the debug file at package.publisher@free.fr Thanks

↧

New Post: Optional installation of third party software

April 17, 2015, 3:23 am

≫ Next: Commented Unassigned: Crash while making custom update [264]

≪ Previous: Commented Unassigned: Crash while making custom update [264]

I can't remember exactly, but I think, Microsoft has changed the way "Optional updates" works. It doesn't behave like in Windows XP.

↧

Commented Unassigned: Crash while making custom update [264]

April 17, 2015, 5:21 am

≫ Next: Commented Unassigned: Crash while making custom update [264]

≪ Previous: New Post: Optional installation of third party software

Hello

Any idea, how i could find out whats wrong. When i try to make custom update, GUI crashes after adding "action" to the custom update.

Wsus version 3.2.7600.265

Wsus Packagepublisher Release v1.3.1504.15

Any help appreciated.
Comments: Btw: Your WSUS isn't up to date. It's missing http://www.microsoft.com/de-de/download/details.aspx?id=43633

↧

Commented Unassigned: Crash while making custom update [264]

April 17, 2015, 5:46 am

≫ Next: New Post: Use a real certificate (from CA)

≪ Previous: Commented Unassigned: Crash while making custom update [264]

Hello

Any idea, how i could find out whats wrong. When i try to make custom update, GUI crashes after adding "action" to the custom update.

Wsus version 3.2.7600.265

Wsus Packagepublisher Release v1.3.1504.15

Any help appreciated.
Comments: Yes, i know. But we have 2 networks with same wsus version and package publisher works in other setup without errors.

↧

New Post: Use a real certificate (from CA)

April 20, 2015, 1:45 pm

≫ Next: New Post: Use a real certificate (from CA)

≪ Previous: Commented Unassigned: Crash while making custom update [264]

Hi HiDoo,

Since my clients trust the server through my SSL certificate on port 8531, I really don't understand why they don't trust that same server with the code signing certificate?
Please could you explain me?

The certificate for SSL is a server cert, used to identified a computer. Packages needs to be sign with a code signing certificate. To be trusted, the code signing certificate must be present in the "Trusted Publisher" store. And the certificate of the Root Authority that have issued the code signing cert, must be present in the "Root Certificate authorities" store.

Why it's not necessary to deploy a certificate on my client to install Windows updates through 8531 whereas it is for WPP?

Microsoft updates are digitally signed, and their certificates are already in the good stores.

↧