06 August 2008

Publishing 3rd party updates in SCCM

I am trying to build a demo image for managing security compliance using SCCM. Just when I am to publish my custom application update, I received an error. A check on the log files shows the following:
Publish: : Exception occured during publishing:

Verification of file signature failed for file: \\SCCMDEMO\UpdateServicesPackages\Synthetic Software Update 1_0_d047fc39-4d2e-4a65-a6cf-a098980d26c3\efb7fc95-b36f-481e-8e36-8f25bb4d4020_1.cab$$



Searched through the net and found that I missed some steps in configuring the Update Server on the certificates. Thought of sharing this one with those who encountered the same pain.

Here are the steps I have taken and it works fine after that:
  • Click Start, click Run, type MMC in the text box, and then click OK to open the Microsoft Management Console (MMC).

  1. Click File, click Add/Remove Snap-in, click Add, click Certificates, click Add, select Computer account, and then click Next.

  2. Select Another computer, type the name of the update server or click Browse to find the update server computer, click Finish, click Close, and then click OK.

  3. Expand Certificates (update server name), expand WSUS, and then click Certificates.

  4. In the results pane, right-click the desired certificate, click All Tasks, and then click Export.

  5. In the Certificate Export Wizard, use the default settings to create an export file with the name and location specified in the wizard. This file must be available to the update server before proceeding to the next step.

  6. Right-click Trusted Publishers, click All Tasks, and then click Import. Complete the Certificate Import Wizard using the exported file from step 6.

  7. If a self-signed certificate is used, such as WSUS Publishers Self-signed, right-click Trusted Root Certification Authorities, click All Tasks, and then click Import. Complete the Certificate Import Wizard using the exported file from step 6.

For more information on configuring Update Server, please refer to
http://technet.microsoft.com/en-us/library/bb531061.aspx