WSUS not downloading Vista Updates

I have been unable to download Vista updates to WSUS. I have upgraded WSUS to
SP1. However, Vista updates still fail on download. The rest of windows
updates continue to work just fine.
On the WSUS server, I am getting the following Event Viewer error:
Source: Windows Server Update
Category: Synchronization
Event ID: 364

Content file download failed. Reason: File cert verification failure. Source
File:
/msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
Destination File:
E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0 D3F2B50C6C944.cab.

Forwarded to WSUS newsgroup via crosspost:
microsoft.public.windows.server.update_services

On the web:
http://www.microsoft.com/communities...pdate_services

In your newsreader:
news://msnews.microsoft.com/microsof...pdate_services
--
~Robear Dyer (PA Bear)
MS MVP-Windows (IE, OE, Security, Shell/User)
AumHa VSOP & Admin; DTS-L.org

Tom Hering wrote:
> I have been unable to download Vista updates to WSUS. I have upgraded WSUS
> to SP1. However, Vista updates still fail on download. The rest of windows
> updates continue to work just fine.
> On the WSUS server, I am getting the following Event Viewer error:
> Source: Windows Server Update
> Category: Synchronization
> Event ID: 364
>
> Content file download failed. Reason: File cert verification failure.
> Source
> File:
> /msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
> Destination File:
> E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0 D3F2B50C6C944.cab.

> Tom Hering wrote:

>> I have been unable to download Vista updates to WSUS. I have upgraded
>> WSUS
>> to SP1. However, Vista updates still fail on download. The rest of
>> windows
>> updates continue to work just fine.

>> On the WSUS server, I am getting the following Event Viewer error:
>> Source: Windows Server Update
>> Category: Synchronization
>> Event ID: 364
>>
>> Content file download failed. Reason: File cert verification failure.
>> Source
>> File:
>> /msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
>> Destination File:
>> E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0 D3F2B50C6C944.cab.

Have you APPROVED the "Root Certificate Updates (KB931125)" for installation
on all of your systems?

Are they installed? Specifically is the update installed on the WSUS Server?

KB931125 was distributed in the "Updates" classification, so if you're not
synchronizing that classification, you definitely don't have it on the WSUS
Server database, and it's probably not installed on the systems.

(Note: You can also install the update from WU/MU.)


--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/pr...2-D095EB07B36E

Everything you need for WSUS is at
http://www.microsoft.com/wsus

And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
.....

The root certificates was the problem. After updating the server, all Vista
updates downloaded.
You are right. I have not seleted the Updates classification. I don't
suppose there is a way to just get root certificates downloaded without
picking the entire classification?
Thanks a bunch.

"Lawrence Garvin (MVP)" wrote:

> > Tom Hering wrote:
>
> >> I have been unable to download Vista updates to WSUS. I have upgraded
> >> WSUS
> >> to SP1. However, Vista updates still fail on download. The rest of
> >> windows
> >> updates continue to work just fine.
>
> >> On the WSUS server, I am getting the following Event Viewer error:
> >> Source: Windows Server Update
> >> Category: Synchronization
> >> Event ID: 364
> >>
> >> Content file download failed. Reason: File cert verification failure.
> >> Source
> >> File:
> >> /msdownload/update/v3-19990518/cabpool/windows6.0-kb936357-x64_7c70a8817ab6e862ee35c9745f0d3f2b50c6c944.cab
> >> Destination File:
> >> E:\WSUS\WsusContent\44\7C70A8817AB6E862EE35C9745F0 D3F2B50C6C944.cab.
>
> Have you APPROVED the "Root Certificate Updates (KB931125)" for installation
> on all of your systems?
>
> Are they installed? Specifically is the update installed on the WSUS Server?
>
> KB931125 was distributed in the "Updates" classification, so if you're not
> synchronizing that classification, you definitely don't have it on the WSUS
> Server database, and it's probably not installed on the systems.
>
> (Note: You can also install the update from WU/MU.)
>
>
> --
> Lawrence Garvin, M.S., MCTS, MCP
> Independent WSUS Evangelist
> MVP-Software Distribution (2005-2007)
> https://mvp.support.microsoft.com/pr...2-D095EB07B36E
>
> Everything you need for WSUS is at
> http://www.microsoft.com/wsus
>
> And, almost everything else is at
> http://wsusinfo.onsitechsolutions.com
> .....
>
>
>
>

"Tom Hering" <> wrote in message
news:18B40C36-AC27-463E-A222-...
> The root certificates was the problem.

It almost always is these days. :-)


> I don't suppose there is a way to just get root certificates downloaded
> without picking the entire classification?

Yes... actually there is... but it might be more work than it's worth.

Besides, there'll be many other things in the "Updates" classification that
you're going to want.
For example:
BitLocker and EFS enhancements
.NET Framework v2 and v3 installers
RDC (TS v6) update
NonSec/NonCrit updates for .NET Framework
NonSec/NotCrit updates for all OS platforms

You can obtain the updates from the Microsoft Update Catalog (beta) and
import them into WSUS3.

See this WSUS blog entry as a starting point for more details.

http://blogs.technet.com/wsus/archiv...nd-927891.aspx


--
Lawrence Garvin, M.S., MCTS, MCP
Independent WSUS Evangelist
MVP-Software Distribution (2005-2007)
https://mvp.support.microsoft.com/pr...2-D095EB07B36E

Everything you need for WSUS is at
http://www.microsoft.com/wsus

And, almost everything else is at
http://wsusinfo.onsitechsolutions.com
.....