none
WSUS can't download kb4022730: File cert verification failure RRS feed

  • Question

  • I have WSUS v.6.3.9600.18838 working on Windows Server 2012 R2.

    After each synchronization, errors appear in the program log when checking the certificate of the update file kb4022730. I looked through the log for a month and I see no other errors. Please help solve the problem.

    Full text of errors:

    10032 The server cannot download some updates.

    364 Error downloading content file.
           Reason: File cert verification failure.
           Source file:  /c/msdownload/update/software/secu/2017/06/windows10.0-kb4022730-x86_749a5a7af3ac36a1ff014171f2b21eb38fc224f4.cab

           Destination file: C:\Program Files\Update Services\LogFiles\WSusTemp\749A5A7AF3AC36A1FF014171F2B21EB38FC224F4.cab

    Content of SoftwareDistribution.log:

    2019-10-18 10:49:14.198 UTC Info WsusService.39 ContentSyncAgent.WakeUpWorkerThreadProc ContentSyncAgent found no more Jobs, going to Sleep for BITS Notifications
    2019-10-18 10:49:25.328 UTC Info w3wp.97 ThreadEntry TimerQueue.FireNextTimers
    2019-10-18 10:49:25.329 UTC Info w3wp.97 ServerImplementation.UpdateCache Database change occured; check if we need to update cache.
    2019-10-18 10:49:43.891 UTC Info WsusService.39 ContentSyncAgent.ProcessBITSNotificationQueue ContentSyncAgent recieved Transferred Event for Item: 446bd91c-91a4-4c6b-8266-e429c3b3402a
    2019-10-18 10:49:43.892 UTC Info WsusService.39 ContentSyncAgent.ContentSyncSPFireStateMachineEvent ContentSyncAgent firing Event: FileDownloaded for Item: 446bd91c-91a4-4c6b-8266-e429c3b3402a
    2019-10-18 10:49:43.977 UTC Info WsusService.39 ContentSyncAgent.VerifyCRC filelocalpath is C:\Program Files\Update Services\LogFiles\WSusTemp\F8CC3C3282C9D0EFF5C59AE004BD468D037A0B23.cab, additionalHash is F661FB69CA3508CD7A689BFDC98A3E70F8F0552AD3E824FAEC28FC918EB29414
    2019-10-18 10:49:44.057 UTC Info WsusService.39 ContentSyncAgent.VerifyCRC calculated sha1 hash is F8CC3C3282C9D0EFF5C59AE004BD468D037A0B23
    2019-10-18 10:49:44.058 UTC Info WsusService.39 ContentSyncAgent.VerifyCRC matched sha1 hash
    2019-10-18 10:49:44.206 UTC Info WsusService.39 ContentSyncAgent.VerifyCRC calculated sha2 sha256 hash is F661FB69CA3508CD7A689BFDC98A3E70F8F0552AD3E824FAEC28FC918EB29414
    2019-10-18 10:49:44.420 UTC Info WsusService.39 CabUtilities.CheckCertificateSignature File cert verification failed for C:\Program Files\Update Services\LogFiles\WSusTemp\F8CC3C3282C9D0EFF5C59AE004BD468D037A0B23.cab with 2148204801
    2019-10-18 10:49:44.425 UTC Warning WsusService.39 ContentSyncAgent.ProcessBITSNotificationQueue Invalid file deleted: C:\Program Files\Update Services\LogFiles\WSusTemp\F8CC3C3282C9D0EFF5C59AE004BD468D037A0B23.cab
    2019-10-18 10:49:44.426 UTC Info WsusService.39 ContentSyncAgent.ContentSyncSPFireStateMachineEvent ContentSyncAgent firing Event: FileVerificationFailed for Item: 446bd91c-91a4-4c6b-8266-e429c3b3402a

    Friday, October 18, 2019 2:04 PM

All replies

  • I'm in the same boat. Server 2019 - v10.0.17763.1.
    Friday, October 18, 2019 4:14 PM
  • Hi Yurybx,
       

    According to my observation, KB4022730 for different operating systems has been replaced by a subsequent security update. Consider checking the information displayed in the WSUS console to approve those newer updates.
          

        

    Hope the above can help you.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 21, 2019 1:52 AM
  • I checked the superseding updates: they have already been approved. So I just rejected the problematic update. Thanks for answers!
    Monday, October 21, 2019 6:00 AM
  • Hi Yurybx,
      

    Will the download error still occur after the approval of the newer update?
    And is the installation on the client side normal?
       

    Any progress is welcome here.
       

    Regards,
    Yic

    Please remember to mark as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, October 21, 2019 6:18 AM