Software Updates Error: Failed to download content id 16808472. Error: Invalid certificate signature

Hello,

We get an error whenever we try to download updates for a defined Software Update group. See error below;

Our current environment is consists of SCCM 2012 SP1 running on multiple Windows 2012 servers, and a SQL 2012 database. Additionally, we do not use a proxy for any internet traffic.

This issue is consistent for both of our development and production environments when attempting to download Software Updates from Microsoft. There is no consistency with respect to which update that the download fails on, and it happens for large Software Updates Groups and small ones alike.

Have you seen this error happen before? Looking for a solution.

Thanks,

Bill & Brent




  • Edited by Brent Payne Wednesday, March 26, 2014 5:48 PM
March 25th, 2014 1:07pm

Thanks for the response Jason.

We don't use a proxy or anything that does url filtering. We've also investigated our internal network, and can not find anything that would disrupt the network traffic.

Bill


  • Edited by Brent Payne Tuesday, March 25, 2014 3:34 PM
Free Windows Admin Tool Kit Click here and download it now
March 25th, 2014 2:18pm

Thanks Gerry. I tried disabling the Protected Mode in IE, and where I still have some instances where the download fails, it is less frequest than it was initially. Furthermore, I worked directly with Microsft support, and they referenced the same KB article;

http://technet.microsoft.com/en-us/library/bb932193.aspx

which basically says that it's a known issue. So we've implemented a workaround to edit the membership for those that fail, and then download them seperately, and then re-added the membership for those updates to the appropriate update group. It's not perfect, but we've been having success with it.

Thanks for all your help.

Bill

March 27th, 2014 7:19pm

Hi Gerry,

Am going to summarise what I've done until now. I have installed SCUP 2011 on an existing SCCM 2012 R2 infrastructure locally on the box. The whole implementation process went really well (pre-requisites, installation, SCCM config).

But I have an issue and is that when try to download the updates (Adobe REader XI) from within the software update group I've created, they all fail with the following error: "Failed to download content id 16844331. Error: User profile cannot be loaded."

This is what I've tried to sort this out without success:

1. IIS WSUS Website, Anonymous Authentication: change it to "Application Pool Identity".

2. Patchdownloader.log: it says "HttpSendRequest failed 500" and 

"ERROR: DownloadContentFiles() failed with hr=0x800701f4 Software Updates Patch Downloader". These are too generic errors and didn't find anything really useful.

3. IE\Security: disable "Enable Protected Mode".

4. Moved the SCUP DB to a different drive from the install as the DB is placed in the active user profile.

5. IE: Checked the LAN Settings but there's no proxy but it points to a pac file. Checked this but there were no Adobe URLs but I was able to manually download the updates by using the URLs from the SCUP catalogs.

After all of this am a bit confused. MS patches download okay as expected. The only thing I can think of is that the web filter servers (WebSense NLB) is not allowing the traffic and I need to add my admin account (downloading from the console not ADR) to allow the traffic pass through?

I'd really appreciate your input on this.

Best Regards,

Felipe.


 
Free Windows Admin Tool Kit Click here and download it now
April 22nd, 2015 5:21am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics