File signature verification error

[WSUSUpdateAdmin]

Hi Mike,

[...]So my conclusion is that the auto update (to newer version) is corrupting the verifcation signatures.

Sorry, I've never seen or heard about that before.

Regards
Torsten Wittrock

[MikeWill34]

After each automatic update of WSUS I get file verification error which stops the process completely

What are the files it is complaining about after an update ?

Last time it happed I did not see any information about which file was failing verification.
Is there an option to produce a more detailed log?

I will post all the log files and screen messages next time it happens, hopefully not any time soon

[Denniss]

Never delete the whole WOU folder, you just need to delete the \client\md folder. Or you let the updategenerator run through the downloads without file verification once.
A logfile from the Update generator is present in the \log subfolder.

[MikeWill34]

Hi All

Ran WSUS today and got an automatic update from 6.8.6 to 6.9

Noticed this line in the log

"Deleted wsusoffline69_hashes.txt"

Did not need to uncheck "verify downloaded updates"

Problem seems to be fixed.

[WSUSUpdateAdmin]

Hi Mike,

thx for feedback!

Regards
Torsten Wittrock

[burgessms]

having same problem:

Code: Select all

Wed 07/06/2011 17:57:16.51 - Info: Starting WSUS Offline Update download (v. 6.9) for w60 glb
Wed 07/06/2011 17:57:16.53 - Info: Option /includedotnet detected
Wed 07/06/2011 17:57:16.57 - Info: Option /includemsse detected
Wed 07/06/2011 17:57:16.60 - Info: Option /includewddefs detected
Wed 07/06/2011 17:57:16.64 - Info: Option /verify detected
Wed 07/06/2011 17:57:16.67 - Info: Option /exitonerror detected
Wed 07/06/2011 17:57:17.59 - Info: Set time zone to LOC7:00
Wed 07/06/2011 17:57:21.42 - Error: File integrity verification failure

Code: Select all

Starting WSUS Offline Update download (v. 6.9) for w60 glb...
Cleaning up existing directories...
Verifying integrity of Windows Update Agent installation and catalog files...
..\wsus\wsusscn2.cab: No match
..\wsus\wsusscn2.cab: Known file not used
hashdeep.exe: Audit failed
          Files matched: 2
Files partially matched: 0
            Files moved: 0
        New files found: 1
  Known files not found: 1
ERROR: File integrity verification failure.
Press any key to continue . . .


Also, having trouble downloading the larger files from MS:

Code: Select all

--2011-07-06 18:04:29--  http://download.windowsupdate.com/microsoftupdate/v6/w
usscan/wsusscn2.cab
Reusing existing connection to download.windowsupdate.com:80.
HTTP request sent, awaiting response... 200 OK
Length: 26770928 (26M) [application/octet-stream]
Saving to: `../client/wsus/wsusscn2.cab'

 9% [==>                                    ] 2,430,274   --.-K/s   in 8m 18s

2011-07-06 18:12:47 (4.77 KB/s) - Read error at byte 2430274/26770928 (Connecti
n reset by peer). Retrying.

--2011-07-06 18:12:47--  (try: 2)  http://download.windowsupdate.com/microsoftu
date/v6/wsusscan/wsusscn2.cab
Connecting to download.windowsupdate.com|65.54.87.117|:80... connected.
HTTP request sent, awaiting response... 206 Partial Content
Length: 26770928 (26M), 24340654 (23M) remaining [application/octet-stream]
Saving to: `../client/wsus/wsusscn2.cab'

13% [+++=>                                  ] 3,554,122   --.-K/s  eta 33m 59s

Of course, this is taking me hours to download files that used to go in minutes.

[Denniss]

Start one download run without file verification or manually delete the files in the \client\md folder

Download problems are often M$ load balancer or ISP trouble.

[burgessms]

Start one download run without file verification or manually delete the files in the \client\md folder

Grrrr.. This didn't use to happen. Since 2008, this has only started happening in the last 6 months for me. \client\md is empty. "without file verification" just seems to be asking for trouble, but it worked. Thanks.

Download problems are often M$ load balancer or ISP trouble.

ISP seems OK for every other DL. I'll lay this on MS ! Or maybe my ISP thinks it's a virus distribution site

[OlegK]

The story reminds me of my former problem with file signature check failure
viewtopic.php?f=3&t=925
which was successfully solved by updating the root certificates on the system.

Though this does not seem to be the case here, still it calls for my former idea, that a user should be informed a of any deleted and/or missing files with a special dialogue to make sure the user is aware of it even without examining the whole log.

[Hossy81]

Hallo zusammen,
ich habe ein ähnliches Problem wie der Threadstarter. Da ich ich mich aber gar nicht auskenne, da ich das Tool soeben erst kennern gelernt habe bitte ich um eure kompetente Hilfe.
Ich habe soeben VOR dem neuaufsetzen versucht, mittels WSUS mir schon einmal die relevanten Updates etc. zu laden. Jedoch kommt immer eine Fehlermeldung.
Vielleich liegt es daran, dass ich momentan Win 7 Ultimate x64 nutze und die Update Dateien von Win Vista x64 laden wollte (da ich überlege nach dem Neuaufsetzen zu Vista zurückzukehren).
Hier mal die Log Einträge:

Code: Select all

29.10.2012 15:57:02,96 - Info: Starting WSUS Offline Update download (v. 7.5) for w60-x64 glb
29.10.2012 15:57:02,97 - Info: Option /includedotnet detected
29.10.2012 15:57:02,98 - Info: Option /includewddefs detected
29.10.2012 15:57:02,99 - Info: Option /verify detected
29.10.2012 15:57:03,00 - Info: Option /exitonerror detected
29.10.2012 15:57:03,15 - Info: Set time zone to LOC-1:00
29.10.2012 15:57:03,84 - Info: Downloaded mkisofs tool
29.10.2012 15:57:04,44 - Info: Downloaded Sysinternals' tools Autologon, Sigcheck and Streams
29.10.2012 15:58:54,13 - Info: Downloaded/validated most recent Windows Update Agent installation and catalog files
29.10.2012 15:58:54,13 - Warning: Deleted unsigned file "C:\Users\Sebastian\Downloads\wsusoffline\client\wsus\WindowsUpdateAgent30-x64.exe"
29.10.2012 15:58:54,13 - Warning: Deleted unsigned file "C:\Users\Sebastian\Downloads\wsusoffline\client\wsus\WindowsUpdateAgent30-x86.exe"
29.10.2012 15:58:54,13 - Warning: Deleted unsigned file "C:\Users\Sebastian\Downloads\wsusoffline\client\wsus\wsusscn2.cab"
29.10.2012 15:58:54,94 - Error: File signature verification failure


Allerdings glaube ich das eigentlich nicht so dass meine Vermutung wirklich zutreffen ist, denn ich habe dann mal versucht, die Dateien von Win 7 laden (was ich ja momentan auch drauf habe) und hier kommt auch ein Fehler und Wsus bricht ab.
Der Log sieht dann so aus:

Code: Select all

29.10.2012 22:26:51,07 - Info: Starting WSUS Offline Update download (v. 7.5) for w61-x64 glb
29.10.2012 22:26:51,07 - Info: Option /includedotnet detected
29.10.2012 22:26:51,08 - Info: Option /includewddefs detected
29.10.2012 22:26:51,10 - Info: Option /verify detected
29.10.2012 22:26:51,10 - Info: Option /exitonerror detected
29.10.2012 22:26:51,25 - Info: Set time zone to LOC-1:00
29.10.2012 22:26:51,97 - Info: Downloaded mkisofs tool
29.10.2012 22:26:52,61 - Info: Downloaded Sysinternals' tools Autologon, Sigcheck and Streams
29.10.2012 22:28:38,06 - Info: Downloaded/validated most recent Windows Update Agent installation and catalog files
29.10.2012 22:28:38,06 - Warning: Deleted unsigned file "C:\Users\Sebastian\Downloads\wsusoffline\client\wsus\WindowsUpdateAgent30-x64.exe"
29.10.2012 22:28:38,06 - Warning: Deleted unsigned file "C:\Users\Sebastian\Downloads\wsusoffline\client\wsus\WindowsUpdateAgent30-x86.exe"
29.10.2012 22:28:38,06 - Warning: Deleted unsigned file "C:\Users\Sebastian\Downloads\wsusoffline\client\wsus\wsusscn2.cab"
29.10.2012 22:28:39,05 - Error: File signature verification failure


Über eure Hilfe würde ich mich freuen und sende viele Grüße