Software Vulnerability Manager’s automatic package publishing requires the Flexera Software Vulnerability Manager Patch Daemon service installed on your WSUS server. This service periodically checks your SVM server or SVM Cloud for subscribed packages and checks if any are available to publish.
TIP: You can set the frequency of these checks in Patch Publisher by following the steps in Connect SVM in the SVM Patch Publisher.
The Patch Daemon requires the user to be a member of the local administrators and WSUS administrators groups on the WSUS server. If the user account running the path daemon service is not a member of these groups, errors occur like the following:
[10/03/2021 14:27:20|V] --- Stack Trace Begins (0) ---
InvalidOperationException: Failed to sign package; error was: 2147942405
at Microsoft.UpdateServices.Internal.BaseApi.Publisher.SignPackageCab(Boolean dualSign, String httpTimeStamp)
at Microsoft.UpdateServices.Internal.BaseApi.Publisher.PublishPackage(String sourcePath, String additionalSourcePath, String packageDirectoryName, Boolean dualSign, String httpTimeStamp)
at Microsoft.UpdateServices.Internal.BaseApi.Publisher.PublishPackage(String sourcePath, String packageDirectoryName)
at System.Threading.Tasks.Task.Execute()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Flexera.SVM.Patch.Daemon.WsusApi.PublishPackageAsync()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Flexera.SVM.Patch.Daemon.PublishPackageWorkItem.PublishPackageAsync()
at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
at Flexera.SVM.Patch.Daemon.DaemonWorkItem.ExecuteTasks()
--- Stack Trace Ends ---
Solution
To resolve this issue, add your Flexera Software Vulnerability Manager Patch Daemon service account user to local administrators and WSUS administrators groups on your WSUS server.
Workaround if unable to add users to local administrators
Some security policies may only allow you to add users to the WSUS administrators but not the local administrator's group. In this situation, administrators can give service user accounts full control over certain items to allow for package publishing. To do this, follow the steps below.
- Registry
- Open Windows Registry Editor on the WSUS machine.
- Navigate to each HKEY below:
HKEY_LOCAL_MACHINE\Software\Flexera
HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Disallowed
HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\Disallowed
HKLM\Software\Microsoft\SystemCertificates\Disallowed
HKLM\Software\Microsoft\Update Services\Server\Setup
HKLM\SOFTWARE\Classes\AppID\{8F5D3447-9CCE-455C-BAEF-55D42420143B}
The next steps must be done on each HKEY individually.
- Right-click on the HKEY and select Permissions.
- Select Add… then add a service account user.
- Select Allow next to Full Control. Then, select Apply.
- Windows Explorer
- Open Windows Explorer.
- Go to the following locations:
C:\ProgramData\Microsoft\Crypto
C:\ProgramData\Flexera Software\SVM Patch
The next steps must be done on each location individually.
- Right-click on Properties, then select Security.
- Select the service user account you want to allow package publishing for.
- Select Allow next to Full Control. Then, select Apply.
- Shares and groups
- Open Local Users and Groups.
- Add the service user account to WSUS administrators. WSUS administrators need full access to the WSUS content location, including Share and NTFS.
- DCOM (Distributed Component Object Model)
- Open DCOMCNFG and go to Component Services > Computers > My Computer > DCOM Config.
- Modify the WSUSCertServer security settings:
- Launch and Activation permissions: Give Local Launch and Local Activation rights to WSUS administrators group/your service user.
- Access permissions: Give Local Access rights to WSUS administrators group/your service user.
- Reboot the device.
Related Articles
InstallCognos.ps1 script fails if service account is a member of an AD group that doesn't exist 3Number of Views SVM "Failed to sign the package" Error 2147942593 5Number of Views Determine If The User Launching Installer Is In The Administrators Group 3Number of Views Package publishing failed Code -2146233079 Error 2148081670 16Number of Views Errors logged in VMware logs when gathering inventory from vSphere Cluster Services (vCLS) virtual machines: "The privileg… 4Number of Views
Hi, I am Reva - Ask me anything.
No new updates
Thanks for the feedback!
Your feedback has been saved.Rate this response:
Add Additional feedback ( Optional )
Are you sure you want to cancel
the case creation?
Are you sure you want to cancel the case creation?
Are you sure you want to close this case
| Products | Region | Phone Numbers |
|---|---|---|
| FlexNet Operations FlexNet Embedded FlexNet Publisher FlexNet Connect FlexNet Code Insight InstallAnywhere InstallShield |
North America * |
+1 630-332-2513 (toll) +1 877-279-2853 (toll-free in North America) |
| Europe * |
+44 1925 944367 (toll) +44 800 047 8642 (toll-free in Europe) |
|
| Japan * | +81 3-4540-5335 (select option 2) | |
| Australia * |
+61 3 9895 2177 +61 1800 560 603 (toll-free in Australia) |
|
|
Usage Intelligence (formerly
Revulytics) Compliance Intelligence |
Please use the Case Portal to submit your support ticket or reach out to your Revenera contact. | |
Case id: 00001065
Activity: Status change: 2 hours ago