Author Topic: Failed to sign package; error was: 2147954402 OR 2147954429 OR 2147954407  (Read 917 times)

Offline Kirankr31

  • Newbie
  • *
  • Posts: 1
    • View Profile
An error occured while publishing an update to WSUS, Failed to sign package, error was 2147954402
« Last Edit: February 04, 2019, 11:00:20 AM by Justin Chalfant »

Offline Justin Chalfant

  • Patch My PC Support
  • Administrator
  • Hero Member
  • *****
  • Posts: 1834
    • View Profile
    • Patch My PC Support
Re: Unable to publish third party software updates to WSUS
« Reply #1 on: February 04, 2019, 05:19:15 AM »
Hey!

We've seen this a few times.

2147954402 = The operation timed out

This happens when you are using a proxy in the environment. You will one of the following error(s) in the PatchMyPC.log with 2147954402 being the most common.



Most common one = "An error occurred while publishing an update to WSUS: Failed to sign package; error was: 2147954402"
Another possible error = "An error occurred while publishing an update to WSUS: Failed to sign package; error was: 2147954429"
Another possible error = "An error occurred while publishing an update to WSUS: Failed to sign package; error was: 2147954407"

The reason this happens is that the although the publishing service and the SUP/WSUS is most likely configured to use a proxy. The actual WSUS API we use for the timestamping operation to http://timestamp.digicert.com uses the default proxy configured at the SYSTEM level. We have confirmed with the SCCM product group this seems to be a known scenario where the WSUS API uses the default HTTP proxy setting in the SYSTEM level context, not the proxy configured in WSUS. Since the SYSTEM proxy is usually not set, this is why the HTTP call to http://timestamp.digicert.com will return the error(s) listed above.

Setting the SYSTEM Proxy:

To set the SYSTEM level proxy, we've found it's usually easiest to set it using Internet Explorer and PSEXEC.exe.

  • Download PSEXEC.exe from https://live.sysinternals.com/
  • Open command prompt as Administrator
  • Launch Internet Explorer as SYSTEM using command line: psexec.exe -s -i "C:\Program Files\internet explorer\iexplore.exe"
  • In Internet Explorer > Settings > Connections > LAN Settings > Enable "Use a proxy server for your LAN and configure the IP Address and Port and click OK and close IE
  • If psexec.exe is blocked in your environment, you can create a one time scheduled task that must run under SYSTEM/COMPUTER account context and set the SYSTEM level proxy using netsh. You can run the following command line: cmd.exe /c netsh winhttp set proxy http://myproxyserver.com:8080 (where the server name and port are set for your environment)
  • Run the publishing service sync again and see if the publishing process works.
  • If you still have issues publishing updates, please send us a support request via email https://patchmypc.com/technical-support or post a topic to our forum https://patchmypc.com/forum/index.php?board=23.0

Additional Details:

2147954402 = The operation timed out
2147954429 = A connection with the server could not be established
2147954407 = The server name or address could not be resolved
« Last Edit: February 26, 2019, 03:41:30 PM by Justin Chalfant »