WSUS not downloading Vista Updates

[Tom Hering]

I have been unable to download Vista updates to WSUS. I have upgraded WSUS to
SP1. However, Vista updates still fail on download. The rest of windows
updates continue to work just fine.
On the WSUS server, I am getting the following Event Viewer error:
Source: Windows Server Update
Category: Synchronization
Event ID: 364

Content file download failed. Reason: File cert verification failure. Source
File:
/msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
Destination File:
E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0D3F2B50C6C944.cab.

 

[PA Bear]

Forwarded to WSUS newsgroup via crosspost:
microsoft.public.windows.server.update_services

On the web:
http://www.microsoft.com/communitie...crosoft.public.windows.server.update_services

In your newsreader:
news://msnews.microsoft.com/microsoft.public.windows.server.update_services
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org

Tom Hering wrote:
> I have been unable to download Vista updates to WSUS. I have upgraded WSUS
> to SP1. However, Vista updates still fail on download. The rest of windows
> updates continue to work just fine.
> On the WSUS server, I am getting the following Event Viewer error:
> Source: Windows Server Update
> Category: Synchronization
> Event ID: 364
>
> Content file download failed. Reason: File cert verification failure.
> Source
> File:
> /msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
> Destination File:
> E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0D3F2B50C6C944.cab.

 

[Lawrence Garvin \(MVP\)]

> Tom Hering wrote:

>> I have been unable to download Vista updates to WSUS. I have upgraded
>> WSUS
>> to SP1. However, Vista updates still fail on download. The rest of
>> windows
>> updates continue to work just fine.

>> On the WSUS server, I am getting the following Event Viewer error:
>> Source: Windows Server Update
>> Category: Synchronization
>> Event ID: 364
>>
>> Content file download failed. Reason: File cert verification failure.
>> Source
>> File:
>> /msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
>> Destination File:
>> E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0D3F2B50C6C944.cab.

Have you APPROVED the "Root Certificate Updates (KB931125)" for installation
on all of your systems?

Are they installed? Specifically is the update installed on the WSUS Server?

KB931125 was distributed in the "Updates" classification, so if you're not
synchronizing that classification, you definitely don't have it on the WSUS
Server database, and it's probably not installed on the systems.

(Note: You can also install the update from WU/MU.)


--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E

Everything you need for WSUS is at
http://www.microsoft.com/wsus

And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
.....

 

[Tom Hering]

The root certificates was the problem. After updating the server, all Vista
updates downloaded.
You are right. I have not seleted the Updates classification. I don't
suppose there is a way to just get root certificates downloaded without
picking the entire classification?
Thanks a bunch.

"Lawrence Garvin (MVP)" wrote:

> > Tom Hering wrote:
>
> >> I have been unable to download Vista updates to WSUS. I have upgraded
> >> WSUS
> >> to SP1. However, Vista updates still fail on download. The rest of
> >> windows
> >> updates continue to work just fine.
>
> >> On the WSUS server, I am getting the following Event Viewer error:
> >> Source: Windows Server Update
> >> Category: Synchronization
> >> Event ID: 364
> >>
> >> Content file download failed. Reason: File cert verification failure.
> >> Source
> >> File:
> >> /msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
> >> Destination File:
> >> E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0D3F2B50C6C944.cab.
>
> Have you APPROVED the "Root Certificate Updates (KB931125)" for installation
> on all of your systems?
>
> Are they installed? Specifically is the update installed on the WSUS Server?
>
> KB931125 was distributed in the "Updates" classification, so if you're not
> synchronizing that classification, you definitely don't have it on the WSUS
> Server database, and it's probably not installed on the systems.
>
> (Note: You can also install the update from WU/MU.)
>
>
> --
> Lawrence Garvin, M.S., MCTS, MCP
> Independent WSUS Evangelist
> MVP-Software Distribution (2005-2007)
> https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E
>
> Everything you need for WSUS is at
> http://www.microsoft.com/wsus
>
> And, almost everything else is at
> http://wsusinfo.onsitechsolutions.com
> .....
>
>
>
>

 

[Lawrence Garvin \(MVP\)]

"Tom Hering" <TomHering@discussions.microsoft.com> wrote in message
news:18B40C36-AC27-463E-A222-541F3C522A5D@microsoft.com...
> The root certificates was the problem.

It almost always is these days.


> I don't suppose there is a way to just get root certificates downloaded
> without picking the entire classification?

Yes... actually there is... but it might be more work than it's worth.

Besides, there'll be many other things in the "Updates" classification that
you're going to want.
For example:
BitLocker and EFS enhancements
.NET Framework v2 and v3 installers
RDC (TS v6) update
NonSec/NonCrit updates for .NET Framework
NonSec/NotCrit updates for all OS platforms

You can obtain the updates from the Microsoft Update Catalog (beta) and
import them into WSUS3.

See this WSUS blog entry as a starting point for more details.

http://blogs.technet.com/wsus/archi...ta-also-has-wsus-3-0-releases-and-927891.aspx


--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/profile=30E00990-8F1D-4774-BD62-D095EB07B36E

Everything you need for WSUS is at
http://www.microsoft.com/wsus

And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
.....