New Post: [Solved] Updates on Client computer fail with Error Code 800B0109

Hi treefishy,

2013-09-03 16:59:32:567 1008 8dc Misc WARNING: Error: 0x800b0109 when verifying trust for C:\Windows\SoftwareDistribution\Download\a947508375d533852b553315874f5194\1e5cec4d-6673-4181-bf67-b5a2b2e7d75d_1.cab
2013-09-03 16:59:32:567 1008 8dc Misc WARNING: Digital Signatures on file C:\Windows\SoftwareDistribution\Download\a947508375d533852b553315874f5194\1e5cec4d-6673-4181-bf67-b5a2b2e7d75d_1.cab are not trusted: Error 0x800b0109

Ensure Wsus Certificate is correctly set on the server :


Look in the Local Computer Store

• If you are using your own Code-Signing certificate, it should be present in :
  ◦ The Certificate of the authority who have made this certificate should be in the (Local Computer)\Trusted Root Certification Authority.
  ◦ (Local Computer)\Trusted Publisher.
  ◦ (Local Computer)\Wsus
  .
• If you are using a Self-Signed Certificate, it should be present in :
  ◦ (Local Computer)\Trusted Root Certification Authority.
  ◦ (Local Computer)\Trusted Publisher.
  ◦ (Local Computer)\Wsus
  

Ensure the certificate is correctly set on your client :


Look in the Local Computer Store

• If you are using a Self-Signed Certificate, it should be present in :
  ◦ (Local Computer)\Trusted Publisher.
  ◦ (Local Computer)\Trusted Root Certification Authority.
  
• If you are using your own Code-Signing certificate, it should be present in :
  ◦ (Local Computer)\Trusted Publisher.
  ◦ And the Certificate of the authority who have made this certificate should be in the (Local Computer)\Trusted Roor Certification Authority.
  

If all is ok. Open WPP, select the update and copy the URL path. Copy it in Internet Explorer and download the file to the desktop.


Display the properties of the file, go to "Numeric signature' tab :


Select the cert and click 'Details'.


What is the error message ?



Note the serial number of the certificate. Open the certificate of your client (in trusted publishers) and compare the serial number of this certificate with the certificate used to signe the CAB file. Does these equal or different ?