Error: 0x800b0100 when verifying trust

Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
SP1 build 6001 that cannot update out of the box. I hit check for updates
and receive the error above. I have tried everything I could find. The
exact error is below. Any help would be very much appreciated, I have to
have these laptops sent around the country in 3 days and they cannot update!
Please help.

Validating signature for
C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error
0x800b0100
2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
download package information, error = 0x800B0100
2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
0x800B0100
2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
self-update check returned 0x800B0100
2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100

Nace Tech wrote:

> Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
> SP1 build 6001 that cannot update out of the box. I hit check for updates
> and receive the error above. I have tried everything I could find. The
> exact error is below. Any help would be very much appreciated, I have to
> have these laptops sent around the country in 3 days and they cannot update!
> Please help.
>
> Validating signature for
> C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
> 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
> verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
> 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
> C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error
> 0x800b0100
> 2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
> download package information, error = 0x800B0100
> 2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
> 0x800B0100
> 2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
> self-update check returned 0x800B0100
> 2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100


Please tell us what you've already tried so we don't suggest you try
something you already have <w>

Do all the laptops have the same security sofware and, how are you
attempting to update them ... via WSUS, direct connection to the MS
update servers, etc ?

What firewalls are involved ?

You could download the latest version of the Windows Update Agent and do
a /wuforce installation on one of the laptops, but to see if that
resolves the issue but, if 3rd party software is the cause ...
http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============

Hello, this is all done through the control panel, completely stand alone
systems with the latest Kaspersky antivi.

I have tried updating through "check for updates" from the control panel
with kasp completely uninstalled,
windows firewall on and off.
Bit defender off
I set the windows update server to automatic instead of delayed
I changed my catroot2 to catroo2OLD
i registered the regsvr32 wintrust.dll THEN
net stop cryptsvc
ren %systemroot%\system32\catroot2 oldcatroot2
net start cryptsvc
I checked my time even selected another time server.
I changed IE's advanced tab to all variations of HTTP1.1 on/off and through
proxy on/off
I did sfc /scannow
I did a disc upgrade
I reinstalled the windows update agent using an elevated console with
/wuforce flag

I might have missed something but I believe these are all of the
'constructive' attempts I've made. Anything would be extremely appreciated.
I'm going to take the laptops home tonight and see perhaps if it's our
firewall. I am at my whits end. I hear about this elevated console using
CTRL + SHIFT + ENTER, am i supposed to see anything change? perhaps i'm not
doing that accurately.






"MowGreen [MVP]" wrote:

> Nace Tech wrote:
>
> > Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
> > SP1 build 6001 that cannot update out of the box. I hit check for updates
> > and receive the error above. I have tried everything I could find. The
> > exact error is below. Any help would be very much appreciated, I have to
> > have these laptops sent around the country in 3 days and they cannot update!
> > Please help.
> >
> > Validating signature for
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
> > verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error
> > 0x800b0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
> > download package information, error = 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
> > 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
> > self-update check returned 0x800B0100
> > 2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100
>
>
> Please tell us what you've already tried so we don't suggest you try
> something you already have <w>
>
> Do all the laptops have the same security sofware and, how are you
> attempting to update them ... via WSUS, direct connection to the MS
> update servers, etc ?
>
> What firewalls are involved ?
>
> You could download the latest version of the Windows Update Agent and do
> a /wuforce installation on one of the laptops, but to see if that
> resolves the issue but, if 3rd party software is the cause ...
> http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>

FYI I did not, and even after reinstalling the windows updating agent i STILL
do not have this file

C:\Windows\winsxs\pending.xml

anywhere.

"MowGreen [MVP]" wrote:

> Nace Tech wrote:
>
> > Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
> > SP1 build 6001 that cannot update out of the box. I hit check for updates
> > and receive the error above. I have tried everything I could find. The
> > exact error is below. Any help would be very much appreciated, I have to
> > have these laptops sent around the country in 3 days and they cannot update!
> > Please help.
> >
> > Validating signature for
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
> > verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error
> > 0x800b0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
> > download package information, error = 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
> > 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
> > self-update check returned 0x800B0100
> > 2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100
>
>
> Please tell us what you've already tried so we don't suggest you try
> something you already have <w>
>
> Do all the laptops have the same security sofware and, how are you
> attempting to update them ... via WSUS, direct connection to the MS
> update servers, etc ?
>
> What firewalls are involved ?
>
> You could download the latest version of the Windows Update Agent and do
> a /wuforce installation on one of the laptops, but to see if that
> resolves the issue but, if 3rd party software is the cause ...
> http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>

I thought there would be promising results from the Vista Update Readiness
Tool however when I try to install it it says that it's not for my version.
(im x86).


"MowGreen [MVP]" wrote:

> Nace Tech wrote:
>
> > Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
> > SP1 build 6001 that cannot update out of the box. I hit check for updates
> > and receive the error above. I have tried everything I could find. The
> > exact error is below. Any help would be very much appreciated, I have to
> > have these laptops sent around the country in 3 days and they cannot update!
> > Please help.
> >
> > Validating signature for
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
> > verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error
> > 0x800b0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
> > download package information, error = 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
> > 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
> > self-update check returned 0x800B0100
> > 2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100
>
>
> Please tell us what you've already tried so we don't suggest you try
> something you already have <w>
>
> Do all the laptops have the same security sofware and, how are you
> attempting to update them ... via WSUS, direct connection to the MS
> update servers, etc ?
>
> What firewalls are involved ?
>
> You could download the latest version of the Windows Update Agent and do
> a /wuforce installation on one of the laptops, but to see if that
> resolves the issue but, if 3rd party software is the cause ...
> http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>

> I set the windows update server to automatic instead of delayed

Is a WSUS server involved or is each client seeking the updates from the
MS servers ?

There are 2 antiviruses installed on all of the systems,
KAV and BitDefender ? I'm hoping they both aren't actively monitoring
the systems. When you ran SFC and did a disc upgrade, where both or one
of the AVs monitoring ?

Something isn't right here when systems don't update properly OOB.
Did Dell preinstall the 2 AVs and, I know time is short, but have you
contacted them about this issue ?

You've done all of the steps that I could possibly recommend. AFAIK,
there's no need to run in Elevated mode in order to update Vista.

I'm curious to see the result of your attempt to update directly from
the update servers via another location with a different firewall.


MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============


Nace Tech wrote:

> Hello, this is all done through the control panel, completely stand alone
> systems with the latest Kaspersky antivi.
>
> I have tried updating through "check for updates" from the control panel
> with kasp completely uninstalled,
> windows firewall on and off.
> Bit defender off
> I set the windows update server to automatic instead of delayed
> I changed my catroot2 to catroo2OLD
> i registered the regsvr32 wintrust.dll THEN
> net stop cryptsvc
> ren %systemroot%\system32\catroot2 oldcatroot2
> net start cryptsvc
> I checked my time even selected another time server.
> I changed IE's advanced tab to all variations of HTTP1.1 on/off and through
> proxy on/off
> I did sfc /scannow
> I did a disc upgrade
> I reinstalled the windows update agent using an elevated console with
> /wuforce flag
>
> I might have missed something but I believe these are all of the
> 'constructive' attempts I've made. Anything would be extremely appreciated.
> I'm going to take the laptops home tonight and see perhaps if it's our
> firewall. I am at my whits end. I hear about this elevated console using
> CTRL + SHIFT + ENTER, am i supposed to see anything change? perhaps i'm not
> doing that accurately.
>
>
>
>
>
>
> "MowGreen [MVP]" wrote:
>
>
>>Nace Tech wrote:
>>
>>
>>>Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
>>>SP1 build 6001 that cannot update out of the box. I hit check for updates
>>>and receive the error above. I have tried everything I could find. The
>>>exact error is below. Any help would be very much appreciated, I have to
>>>have these laptops sent around the country in 3 days and they cannot update!
>>>Please help.
>>>
>>>Validating signature for
>>>C:\Windows\SoftwareDistribution\SelfUpdate\wuid ent.cab:
>>>2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
>>>verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
>>>2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
>>>C:\Windows\SoftwareDistribution\SelfUpdate\wuid ent.cab are not trusted: Error
>>>0x800b0100
>>>2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
>>>download package information, error = 0x800B0100
>>>2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
>>>0x800B0100
>>>2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
>>>self-update check returned 0x800B0100
>>>2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100
>>
>>
>>Please tell us what you've already tried so we don't suggest you try
>>something you already have <w>
>>
>>Do all the laptops have the same security sofware and, how are you
>>attempting to update them ... via WSUS, direct connection to the MS
>>update servers, etc ?
>>
>>What firewalls are involved ?
>>
>>You could download the latest version of the Windows Update Agent and do
>>a /wuforce installation on one of the laptops, but to see if that
>>resolves the issue but, if 3rd party software is the cause ...
>>http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007
>>
>>
>>MowGreen [MVP 2003-2008]
>>===============
>> *-343-* FDNY
>>Never Forgotten
>>===============
>>

It is definately something specific to my work place. I"m successfully
updating these issue laptops at home. We run all web traffic through and
HTTP proxy and although we bypass for various windows sites including the one
requested in the windowsupdate.log it must still be blocking something or
transforming something in some way. any suggestions will be appreciated but
it now looks like it's our firewall causing the issue.

"MowGreen [MVP]" wrote:

> Nace Tech wrote:
>
> > Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
> > SP1 build 6001 that cannot update out of the box. I hit check for updates
> > and receive the error above. I have tried everything I could find. The
> > exact error is below. Any help would be very much appreciated, I have to
> > have these laptops sent around the country in 3 days and they cannot update!
> > Please help.
> >
> > Validating signature for
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab:
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
> > verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
> > 2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
> > C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab are not trusted: Error
> > 0x800b0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
> > download package information, error = 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
> > 0x800B0100
> > 2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
> > self-update check returned 0x800B0100
> > 2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100
>
>
> Please tell us what you've already tried so we don't suggest you try
> something you already have <w>
>
> Do all the laptops have the same security sofware and, how are you
> attempting to update them ... via WSUS, direct connection to the MS
> update servers, etc ?
>
> What firewalls are involved ?
>
> You could download the latest version of the Windows Update Agent and do
> a /wuforce installation on one of the laptops, but to see if that
> resolves the issue but, if 3rd party software is the cause ...
> http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>

They were going directly to MS site. As I replied below (way below lol) that
out of our building the updates worked. Thanks for your help. Since these
are going out next week and hopefully never coming back here i might not
nail down the correct firewall setting yet but if i do i will post the
results.

"MowGreen [MVP]" wrote:

> > I set the windows update server to automatic instead of delayed
>
> Is a WSUS server involved or is each client seeking the updates from the
> MS servers ?
>
> There are 2 antiviruses installed on all of the systems,
> KAV and BitDefender ? I'm hoping they both aren't actively monitoring
> the systems. When you ran SFC and did a disc upgrade, where both or one
> of the AVs monitoring ?
>
> Something isn't right here when systems don't update properly OOB.
> Did Dell preinstall the 2 AVs and, I know time is short, but have you
> contacted them about this issue ?
>
> You've done all of the steps that I could possibly recommend. AFAIK,
> there's no need to run in Elevated mode in order to update Vista.
>
> I'm curious to see the result of your attempt to update directly from
> the update servers via another location with a different firewall.
>
>
> MowGreen [MVP 2003-2008]
> ===============
> *-343-* FDNY
> Never Forgotten
> ===============
>
>
> Nace Tech wrote:
>
> > Hello, this is all done through the control panel, completely stand alone
> > systems with the latest Kaspersky antivi.
> >
> > I have tried updating through "check for updates" from the control panel
> > with kasp completely uninstalled,
> > windows firewall on and off.
> > Bit defender off
> > I set the windows update server to automatic instead of delayed
> > I changed my catroot2 to catroo2OLD
> > i registered the regsvr32 wintrust.dll THEN
> > net stop cryptsvc
> > ren %systemroot%\system32\catroot2 oldcatroot2
> > net start cryptsvc
> > I checked my time even selected another time server.
> > I changed IE's advanced tab to all variations of HTTP1.1 on/off and through
> > proxy on/off
> > I did sfc /scannow
> > I did a disc upgrade
> > I reinstalled the windows update agent using an elevated console with
> > /wuforce flag
> >
> > I might have missed something but I believe these are all of the
> > 'constructive' attempts I've made. Anything would be extremely appreciated.
> > I'm going to take the laptops home tonight and see perhaps if it's our
> > firewall. I am at my whits end. I hear about this elevated console using
> > CTRL + SHIFT + ENTER, am i supposed to see anything change? perhaps i'm not
> > doing that accurately.
> >
> >
> >
> >
> >
> >
> > "MowGreen [MVP]" wrote:
> >
> >
> >>Nace Tech wrote:
> >>
> >>
> >>>Hello, I have 8 new Dell latitude laptops with Vista Business shipped with
> >>>SP1 build 6001 that cannot update out of the box. I hit check for updates
> >>>and receive the error above. I have tried everything I could find. The
> >>>exact error is below. Any help would be very much appreciated, I have to
> >>>have these laptops sent around the country in 3 days and they cannot update!
> >>>Please help.
> >>>
> >>>Validating signature for
> >>>C:\Windows\SoftwareDistribution\SelfUpdate\wuid ent.cab:
> >>>2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Error: 0x800b0100 when
> >>>verifying trust for C:\Windows\SoftwareDistribution\SelfUpdate\wuident .cab
> >>>2008-07-31 13:24:26:748 1176 5a8 Misc WARNING: Digital Signatures on file
> >>>C:\Windows\SoftwareDistribution\SelfUpdate\wuid ent.cab are not trusted: Error
> >>>0x800b0100
> >>>2008-07-31 13:24:26:748 1176 5a8 Setup WARNING: SelfUpdate check failed to
> >>>download package information, error = 0x800B0100
> >>>2008-07-31 13:24:26:748 1176 5a8 Setup FATAL: SelfUpdate check failed, err =
> >>>0x800B0100
> >>>2008-07-31 13:24:26:748 1176 5a8 Agent * WARNING: Skipping scan,
> >>>self-update check returned 0x800B0100
> >>>2008-07-31 13:24:26:763 1176 5a8 Agent * WARNING: Exit code = 0x800B0100
> >>
> >>
> >>Please tell us what you've already tried so we don't suggest you try
> >>something you already have <w>
> >>
> >>Do all the laptops have the same security sofware and, how are you
> >>attempting to update them ... via WSUS, direct connection to the MS
> >>update servers, etc ?
> >>
> >>What firewalls are involved ?
> >>
> >>You could download the latest version of the Windows Update Agent and do
> >>a /wuforce installation on one of the laptops, but to see if that
> >>resolves the issue but, if 3rd party software is the cause ...
> >>http://www.bleepingcomputer.com/blogs/mowgreen/inthe dex.php?m=9&y=2007
> >>
> >>
> >>MowGreen [MVP 2003-2008]
> >>===============
> >> *-343-* FDNY
> >>Never Forgotten
> >>===============
> >>
>

Nace Tech wrote:

> They were going directly to MS site. As I replied below (way below lol) that
> out of our building the updates worked. Thanks for your help. Since these
> are going out next week and hopefully never coming back here i might not
> nail down the correct firewall setting yet but if i do i will post the
> results.

Yup, it's either a proxy/firewall or AV-related issue.
I'm curious to see what you come across as the culprit. Will check back
to see your findings.
Thanks.

MowGreen [MVP 2003-2008]
===============
*-343-* FDNY
Never Forgotten
===============