PMImport is failing to download MS patches and Metadata with SSL/TLS/CERT/TRUST type errors
search cancel

PMImport is failing to download MS patches and Metadata with SSL/TLS/CERT/TRUST type errors

book

Article ID: 245304

calendar_today

Updated On:

Products

Client Management Suite IT Management Suite

Issue/Introduction

Patch Management is failing to download MS patches and Metadata. The NS logs are showing invalid certificate and trust errors and unable to establish SSL/TLS.  All errors seem to be SSL/TLS/CERT/TRUST type errors. This was working until recently.  

This is an error when downloading the metadata:

"7/1/2022 8:27:04 AM","Download failed for: https://www.solutionsam.com/imports/7_1/patch/windows/pmimport.cab
 
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
   [System.Net.WebException @ System]
   at Altiris.PatchManagementCore.Utilities.File.HandleDownloadRetry(Uri uri, DownloadContext downloadContext, Exception retryableDownloadException, TimeSpan pauseTimeSpan)
   at Altiris.PatchManagementCore.Utilities.File.DownloadToStreamWithRetries(Uri uri, DownloadContext downloadContext)
   at Altiris.PatchManagementCore.Utilities.File.Download(String fromUrl, String toDirectory, String toFileName, Boolean forceDownload, DownloadParameters miscDownloadParams)
 
The remote certificate is invalid according to the validation procedure.

This is an error when attempting to download a specific Office 2016 patch: 

"7/1/2022 8:28:01 AM","Download failed for: https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/06/windows10.0-kb5014699-x64_1807d6b5df2947669d4cb00d322969ccd43030a3.msu
 
The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.
   [System.Net.WebException @ System]
   at Altiris.PatchManagementCore.Utilities.File.HandleDownloadRetry(Uri uri, DownloadContext downloadContext, Exception retryableDownloadException, TimeSpan pauseTimeSpan)
   at Altiris.PatchManagementCore.Utilities.File.DownloadToStreamWithRetries(Uri uri, DownloadContext downloadContext)
   at Altiris.PatchManagementCore.Utilities.File.Download(String fromUrl, String toDirectory, String toFileName, Boolean forceDownload, DownloadParameters miscDownloadParams)
 
The remote certificate is invalid according to the validation procedure.

And error was:

"7/1/2022 8:27:04 AM","Failed to process cab file https://www.solutionsam.com/imports/7_1/patch/windows/pmimport.cab : The remote certificate is invalid according to the validation procedure.","PMC:WindowsImportTask.Progress","Altiris.PatchManagementCore.dll","36","Errors"

Environment

ITMS 8.6.1119 (GA)

Cause

Internal proxy configuration issue

Resolution

Confirmed that the internal proxy settings had been modified.