SCCM Third Party Updates: SyncUpdate: Exception Message: Failed to sign package; error was: 2148081670

CC Newell 96 Reputation points
2022-05-26T17:12:14.447+00:00

Getting the listed error after setting up and subscribing to Dell Third Party Updates

Configuration Manager 2111 Hotfix Rollup (KB12896009)

I get the following error when trying to download the Dell Open Manage Inventory Agent or any other Dell driver update.
The items are showing as Meta data only
WSUS certificates are in all locations on the SCCM/SCUP server per the recommend actions in the logs

One thing to note is that it looks like Dell Third Party Updates were previously incorrectly configured and not properly removed.

SMS_ISVUPDATES_SYNCAGENT.log

SyncUpdate: Exception Message: Failed to sign package; error was: 2148081670 SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: Exception source Microsoft.UpdateServices.BaseApi SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: Exception TargetSite Void SignPackageCab(Boolean, System.String) SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: Stack at Microsoft.UpdateServices.Internal.BaseApi.Publisher.SignPackageCab(Boolean dualSign, String httpTimeStamp)~~ at Microsoft.UpdateServices.Internal.BaseApi.Publisher.PublishPackage(String sourcePath, String additionalSourcePath, String packageDirectoryName, Boolean dualSign, String httpTimeStamp)~~ at Microsoft.ConfigurationManager.ISVUpdatesSyncAgent.WSUS.UpdateServicesWrapper.AddContentForUpdate(ILogger logger, ISoftwareDistributionPackageWrapper updateSdp, String contentLocation, StatusMessageReporter statusMessageReporter) SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: ===================== Exception Detail End ======================== SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: Verify the WSUS signing certificate has been configured properly: SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: 1) The signing certificate must not be expired. SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: 2) The signing certificate must be in the Trusted Publishers container on the WSUS server. SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: 3) If using self-signed certificates, the certificate must also be in the trusted root container on the WSUS server. SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: 4) If using PKI certificates, the certificate must have been issued by a trusted CA. SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
****STATMSG: (SRVMSG_SMS_ISVUPDATES_SYNCAGENT_UPDATECONTENT_PUBLISH_FAIL_CERTCONFIG).**** SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4)
SyncUpdate: 44b560f7-96ab-4881-901a-7544e4cfb7c6 - Failed to add content for 'Dell OpenManage Inventory Agent(for Dell Business Client Systems), 2.1.0.1' (Update:'44b560f7-96ab-4881-901a-7544e4cfb7c6') Vendor 'Dell' Product:'Drivers and Applications' to WSUS. SMS_ISVUPDATES_SYNCAGENT 5/26/2022 7:22:57 AM 2804 (0x0AF4

Thanks

Microsoft Security Intune Configuration Manager Updates
Microsoft Security Intune Configuration Manager Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Rita Hu -MSFT 9,661 Reputation points
    2022-05-27T06:42:33.453+00:00

    @CC Newell
    Thanks for your posting on Q&A.

    Please help to confirm whether the SUP is remote from the top-level site server. To help me research further, please be kind to provide the whole SMS_ISVUPDATES_SYNCAGENT.log for reference.

    Thanks for your understanding and cooperation.

    Have a great weekend :-)

    Best regards,
    Rita


    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


  2. CC Newell 96 Reputation points
    2022-05-31T18:53:03.79+00:00

    Are here instructions on how to delete / clean out the Third Party Update Catalog meta-data from WSUS. I believe an old configuration is causing the issue and I would like to cleanup all settings and sync'd metadata and start again fresh. I do not have SCUP installed on the server. Thanks


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.