The ‘Automatic Update Install’ job fails in CCS with error message: Digital signature verification failed

Products

• Control Compliance Suite
• Control Compliance Suite Standards Server

Issue/Introduction

Control Compliance Suite (CCS)

The ‘Automatic Update Install’ job fails for CCS version 12.5.2 - 12.6.1 with an error message on CCS Console.

A new signing certificate will be used for all CCS files signed after March 2021. Any updates / QF released after this date will require an updated ‘Symantec.CSM.AssemblyVerifier.dll’. This file contains the updated CCS certificate information necessary to validate the certificate for newly released files.

Digital signature verification failed for Update on Application Server (host = Hostname)

Digital signature verification failed for Patch Assessment Content Update on Application Server (host = hostname).

 

Environment

CCS v12.5.2 - 12.6.1 Application Server/Console
CCS v12.5.2 - 12.6.1 Managers

Resolution

IMPORTANT NOTE: Starting in SCU 2021-1, the Assembly Verifier files are now included in the SCU release, and are applied automatically when you apply SCU 2021-1 or newer SCU releases on the Application Server and remote managers.

 

UPDATED May 18th, 2023 for manual installation only

To resolve this issue, apply the following Hotfix 10109 before you install any CCS product or content update.

• The following Hotfix (HF) package is available for CCS 12.6 and 12.6.1

HF_10109_CCS_12.6.x_PU.zip

NOTE: For steps to apply this Hotfix, refer to the ReadMe_HF_10109_CCS_12.6.x.pdf document that is included in the HF_10109_CCS_12.6.x_PU.zip package in the Download Files section of this KB article.

 

Hotfix 10109 File Information:

HF_10109_CCS_12.6.x_PU.zip

 

File Name	MD5	SHA2
Symantec.CSM.AssemblyVerifier.dll	553b9cadb809044c8279dcaf30a4d2d9	1535ee07b7fd771a750e22cb0b4c37d37e38c7e2c48b0e74dab89615caa74825
symantec.csm.assemblyverifier.x64.dll	3f55d25eea5ddbca8af13b4d61c05864	e43613afe2004339281d6b7310597b7823564c1340334e099b0786dd2f72503c
symantec.csm.assemblyverifier.x86.dll	2c1c2ad26dbe90ce71fab6d6d36d627b	aaba701e0c8d5f49526413bef1ff574eb5b019a26acc7a01d8234c7aac6638a9

 

 

UPDATED May 18th, 2023 for manual installation only

To resolve this issue, apply the following Hotfix 10210 before you install any CCS product or content update.

• The following Hotfix (HF) package is available for CCS 12.5.2

HF_10210_CCS_12.5.2_PU.zip

NOTE: For steps to apply this Hotfix, refer to the ReadMe_HF_10210_CCS_12.5.2.pdf document that is included in the HF_10210_CCS_12.5.2_PU.zip package in the Download Files section of this KB article.

 

 

Hotfix 10210 File Information:

HF_10210_CCS_12.5.2_PU.zip

 

File Name	MD5	SHA2
Symantec.CSM.AssemblyVerifier.dll	ddfa7e1e69c00e18f4ba359cb825a286	36e80e4a7b0b02a8446a6eaca2eba0262854b444f1d8d0f4167a4e491f722e84
symantec.csm.assemblyverifier.x64.dll	074a4616775866a87b0f542aa0c999d3	e8b7b3a9682733e20e471ec5e06f0df655860ad426d3bf647b56f18761000dcc
symantec.csm.assemblyverifier.x86.dll	163b23aef0a427d706a79a4dbb554393	8367490b8105a24533744463c3708c7f4885bd806360d9c8d1cf1dbebb1413a1