What's the specific KB/Q number for the patch?
I can confirm my test systems can download the patches:
My guess is your console can't validate the digital signatures of the downloads files. This is normally caused by out of date root certificates on the console server, you can use this method to update them on the console server.
1. File attached to this article since the download link is no longer available.
2. Extract the files using the command rootsupd.exe /c /t:C:\temp\extroot (you can extract in any folder, create this folder first)
3. From c:\temp\extroot run the following 4 commands (from an elevated prompt)
- updroots.exe authroots.sst
- updroots.exe updroots.sst
- updroots.exe -l roots.sst
- updroots.exe -d delroots.sst
rootsupd.zip 362.1 K
I updated the certificates but still no luck. Is there a difference between Office updates and operating System updates?
Because I can download the Operating System updates.
The certificates MS uses to sign the installers may be different, otherwise it's an installer download from an MS download site. Do see the downloaded files in the \Patches folder? If not are you able to manually download one of the installers and manually verify the certificate?
Right-click on the exe and choose properties.
Verify it's not blocked by looking for an Unblock Button.
Go to the Digital Signature tab and sha256 signature.
Click View Certificate.
Click Certification Path.
What does the certificate status state?
I can not see them in the \patches folder.
I was able to download it manually.
The certificate Shows "This Certificate is OK.
The link you gave me to download ist for x64
Can you please send me the link for x86?
It's possible you proxy is blocking the download, that would cause the patches to fail to download, and verification would undoubtedly fail at that point.
Check for the signature.
Verify it's not blocked in the General tab.
Place it in the \Patches folder.
Close and open the console and see if it looks downloaded in the Scan Results or from View > Patches. There should be a Downdloaded column, if not add it by right-clicking on a column header and drag and drop it.
That worked. How can I get hold of the other patches?
I did this to get the download URLS.
- Go to Tools > Options > Logging and enable All logging. (restart console)
- Go to View > Patches and search for the patch by KB or Q number.
- Highlight and choose to download all of them.
- Navigate to C:\ProgramData\LANDESK\Shavlik Protect\Logs and open the ST.Protect.manage.UserName@MachineName.log
- Search for the number portion of the KB/Q number.
You should see something similar to: Downloading from 'https://download.microsoft.com/download/1/8/B/18BFD93A-1F55-4491-8C70-E4CD153B9D2D/mso2010-kb4011707-fullfile-x86-glb.exe'
6. Repeat for all patches.
My educated guess on root cause would be AV, root certificate, proxy or similar.
Thank's for your help