Some Clients(OU) are failing to install Non-MS updates Pushed by SCCM published by SCUP

Issue: Some Clients(OU) are failing to install Non-MS updates Pushed by SCCM published by SCUP

Error Message :  "Failed to download updates to the WUAgent datastore. Error = 0x800b0004" 

Here is the part of WUAHandler.log 


Symptom :
it’s GP issue Windows Settings / Security Settings / Public Key Policies / Trusted Root Certificate Authorities.if you are deploying the self signed or WSUS certificate through this GP coz  
SCUP requires certificates to sign any updates it publishes for clients. The published certificates(I suppose we are using self-signed certificate than any public cert) need to be trusted by computers for two things: Trusted Root Certificate Authorities and Trusted Publishers. However, it will not be installed as a Trusted Publisher. We’ll have to deploy the certificate to clients using Group Policy mentioned above .

Machine w/o Cert under Trusted Publisher
 

Machine w/o Cert under Trusted Publisher

 


Resolution: 1 We need to enable these policies in  that client or OU, in order to publish the certificate. So that it can start reflecting under "Trusted Publishers"
2. Copy the Cert. from client running fine and paste to affected client under "Trusted Publishers" and then start patching the client.


Reference: http://www.myitforum.com/forums/Scup-Failed-to-download-updates-to-the-WUAgent-datastore-Error-0x800b0004-m232422.aspx

Comments

Popular posts from this blog

The install4j wizard could not find a Java Runtime Environment on your system. Please locate a suitable JRE...

Clients Unable to update - "Cached cookie has expired or new PID is available"

Java Control Panel Icon "Application Not Found"