Automated Application Management for SCCM

Simplify third-party application creation and patching in SCCM

Knowledge Base ArticlesDownload Trial

How to Disable Timestamping for Patch My PC Update Publishing

By default, we will always Timestamp third-party update content when publishing third-party updates to WSUS.

Timestamping can be helpful because even after the WSUS Signing Certificate’s expiration date has occurred, clients will still trust and previously published updates that were signed with that certificate if it was timestamped.

timestamp on WSUS cab file

For example, the following WSUS Signing Certificate has an expiration date of May 20, 2023. If timestamping is enabled, clients will trust an be able to install updates even after the expiration date.

WSUS Signing Certificate Expiration Date

We usually recommend leaving timestamping enabled, but if you need to disable the timestamp feature, you can create the following DWORD value:

HKEY_LOCAL_MACHINE\SOFTWARE\Patch My PC Publishing Service:DisableTimestamping = 1

After creating the registry value, you will need to restart the PatchMyPCService

One reason why you may want to disable time stamping is to test if updates may be failing to publish due to timestamping and web filtering.