FIXED: WSUS Server not seeing Windows 8 and Windows 2012 servers
after looking seeing if new windows 2012 server in wsus environment, not in wsus console. server in proper area in ad , verified getting proper policy. local wsus log showed error during communication however:
2013-08-01 09:35:03:023 796 13b0 ep got wsus selfupdate url: http://<ourwsusserver>/selfupdate 2013-08-01 09:35:03:039 796 13b0 misc validating signature c:\windows\softwaredistribution\selfupdate\wuident.cab: 2013-08-01 09:35:03:039 796 13b0 misc microsoft signed: yes 2013-08-01 09:35:03:039 796 13b0 misc infrastructure signed: no 2013-08-01 09:35:03:039 796 13b0 misc warning: digital signatures on file c:\windows\softwaredistribution\selfupdate\wuident.cab not trusted: error 0x800b0001
2013-08-01 09:35:03:039 796 13b0 setup warning: selfupdate check failed download package information, error = 0x800b0001
2013-08-01 09:35:03:039 796 13b0 setup fatal: selfupdate check failed, err = 0x800b0001 2013-08-01 09:35:03:039 796 13b0 agent * warning: skipping scan, self-update check returned 0x800b0001 2013-08-01 09:35:03:039 796 13b0 agent * warning: exit code = 0x800b0001
many blogs indicated issue kb2720211 not installed on wsus server, had been installed time ago fix similar issue windows 7. until encountered blog , dec 10<sup>th</sup> 2012 posting:
http://community.spiceworks.com/topic/279049-wsus-3-0-sp2-hotfx-clients-not-reporting
“this classic symptom of issue kb2720211 -- either missing, or failed installation.
the key in understanding purpose of kb2720211. message "digital signatures...are not trusted" tells story. in addition providing new wuagent, kb2720211 provides *why* new wuagent needed, i.e. in response flame malware in may, entire certificate infrastructure of wu/mu/wsus gutted , replaced on next several months. kb2720211 intermediate step; kb2661254 (oct 2012) final step.”
posted lawrence gavin – (a trusted guru on things wsus related works solarwinds developing wsus integrated products iirc). issued warning/caveat in post jan 18, 2013:
http://thwack.solarwinds.com/thread/52275
however, responding comment sealed deal me (and detailed instructions above) -
“kb2734608 - wsus server - enable on w8 , ws12 updates, updates windows agent (replaces kb2720211)”
kb2734608 not going show needed on wsus server via automatic update (unlike kb2720211) , not installed.
once kb2734608 installed , wsus sync completed on wsus server, bunch of windows 8 , windows 2012 servers seen on wsus server.
*kb2661254 (referenced in above thread) installed/deployed via our wsus solution.
another troubleshooting tip http://blogs.technet.com/b/sus/archive/2012/09/05/additional-note-on-kb-2734608-regarding-wsu-windows-8-and-windows-server-2012.aspx
hi,
glad have found answer.
thanks sharing here.
regards,
yan li
cataleya li
technet community support
Windows Server > WSUS
Comments
Post a Comment