Dear all,
we have a WSUS server version 3.2.7600.226 running on Windows Server 2008 R2 SP2. We installed WPP v1.3.1511.15. We are working in an AD environment.
We followed the documentation in order to push Acrobat Reader updates to our clients (all running Windows 7 Pro or Windows XP). That is:
- we generated a self-signed certificate within WPP
- we installed it on WSUS server and restarted
- we created a GPO where we published the certificate in both "Trusted Root Certification Authorities" and "Trusted Publisher", and we enabled the "Allow signed content from intranet MS update service location" option
- we published the Acrobat package
We can see the update on the clients, but whenever we try to install them the procedure fails and we read the following errors in the WindowsUpdate.log file (I just tampered with the wsus hostname)
2016-01-16 15:16:27:693 944 c00 Misc Validating signature for C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab with dwProvFlags 0x00000080:
2016-01-16 15:16:27:836 944 c00 Misc FATAL: Error: 0x800b0109 when verifying trust for C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab
2016-01-16 15:16:27:836 944 c00 Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab are not trusted: Error 0x800b0109
2016-01-16 15:16:27:848 944 c00 DnldMgr WARNING: File failed postprocessing, error = 800b0109
2016-01-16 15:16:27:848 944 c00 DnldMgr Failed file: URL = 'http://wsus.localdomain/Content/7A/E593B895DDC935A4BC277D9E422EDB949301C07A.cab', Local path = 'C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab'
2016-01-16 15:16:27:853 944 c00 DnldMgr Error 0x800b0109 occurred while downloading update; notifying dependent calls.
We are frustated because we think we followed all the installation steps, can anyone help us to achieve our goal?
Thank you.
Alessandro
Comments: Dear WinfriedSonntag, than you for your reply! I investigated and I discovered that I signed my cabs with an older version of a certificate that I did not distribute to end clients. I made a new one, published a new packet signed with this one, distributed the certificate and now everything is working. I apologize if I wasted your time. Thank you again. Alessandro
we have a WSUS server version 3.2.7600.226 running on Windows Server 2008 R2 SP2. We installed WPP v1.3.1511.15. We are working in an AD environment.
We followed the documentation in order to push Acrobat Reader updates to our clients (all running Windows 7 Pro or Windows XP). That is:
- we generated a self-signed certificate within WPP
- we installed it on WSUS server and restarted
- we created a GPO where we published the certificate in both "Trusted Root Certification Authorities" and "Trusted Publisher", and we enabled the "Allow signed content from intranet MS update service location" option
- we published the Acrobat package
We can see the update on the clients, but whenever we try to install them the procedure fails and we read the following errors in the WindowsUpdate.log file (I just tampered with the wsus hostname)
2016-01-16 15:16:27:693 944 c00 Misc Validating signature for C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab with dwProvFlags 0x00000080:
2016-01-16 15:16:27:836 944 c00 Misc FATAL: Error: 0x800b0109 when verifying trust for C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab
2016-01-16 15:16:27:836 944 c00 Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab are not trusted: Error 0x800b0109
2016-01-16 15:16:27:848 944 c00 DnldMgr WARNING: File failed postprocessing, error = 800b0109
2016-01-16 15:16:27:848 944 c00 DnldMgr Failed file: URL = 'http://wsus.localdomain/Content/7A/E593B895DDC935A4BC277D9E422EDB949301C07A.cab', Local path = 'C:\Windows\SoftwareDistribution\Download\d1a1e01041c3ba23117f811c9b900da9\AdbeRdrUpd11013.cab'
2016-01-16 15:16:27:853 944 c00 DnldMgr Error 0x800b0109 occurred while downloading update; notifying dependent calls.
We are frustated because we think we followed all the installation steps, can anyone help us to achieve our goal?
Thank you.
Alessandro
Comments: Dear WinfriedSonntag, than you for your reply! I investigated and I discovered that I signed my cabs with an older version of a certificate that I did not distribute to end clients. I made a new one, published a new packet signed with this one, distributed the certificate and now everything is working. I apologize if I wasted your time. Thank you again. Alessandro