This error occurs when a client is attempting to install third-party software update(s) that are signed using a WSUS signing certificate that isn't trusted or the allow third-party updates policy isn't enabled the machine. The signing certificate needs to be in the Trusted Root and Trusted Publishers certificate store.