UNSOLVED
Invalid package signature
Greetings,
We have a fresh install of OME. Everything looks great except when trying to download packages. I'm able to discover and inventory servers. OME shows a list of non-compliant servers. The problem comes when trying to apply the selected packages. The task shows as 100% complete, however nothing gets applied. While looking in the details of the task the follow desctiption is listed:
Invalid package signature ftp://ftp.dell.com/bios/PE2950_BIOS_WIN_2.7.0.EXE ftp://ftp.dell.com/network/NIC_DRVR_WIN_R264532.EXE ftp://ftp.dell.com/SAS-RAID/RAID_DRVR_WIN_R211422.EXE ftp://ftp.dell.com/sysman/RAC_FRMW_WIN_R298944.EXE ftp://ftp.dell.com/SAS-RAID/RAID_FRMW_WIN_R313336.EXE ftp://ftp.dell.com/sas-hdd/FRMW_WIN_R276749.EXE
I monitor the C:\Program Files (x86)\Dell\SysMgt\Essentials\SystemUpdate\Packages directory and see the pacakges come down and then disappear.
Any ideas what could be causing or how to resolve this Invalid package signature error?
Thanks,
Jean
DELL-Rob C
4 Apprentice
•
2843 Posts
1795
0
Posted April 6th, 2012 12:00
Can you click on View Active Catalog and let us know what the release id/date is?
Thanks,
Rob
Hey Rob,
Thanks for the reply. Looks like it is a month old. The "Get the latest" button is greyed out and I'm unable to click it. Is there a way to force it?
Active Catalog
Source: ftp.dell.com/.../catalog.cab
Source Type: DellOnline
Release ID: P3WXG
Release Date: 03/06/2012
Newer version available: No
Thanks,
Jean
DELL-Abhijit P
Community Manager
•
711 Posts
1795
0
Posted April 6th, 2012 12:00
Hi Jean,
This is the most recent catalog and that's why the get new catalog is greyed out.
Are you getting the signature errors for all the packages you sent for updates or just the listed ones. Meanwhile we will check if there is signature issue with the catalog.
Regards
Abhijit
DELL-Abhijit P
Community Manager
•
711 Posts
1801
0
Posted April 6th, 2012 14:00
Thanks for the updates.
Repository Manager is not required for OME to function and your observation is correct. It is not installed by default. It is carried by OME installed and you have to choose that explicitly during installation.
The only reason to suggest it was to isolate the issue. We are verifying the catalog from our end to check if there are any packages with signature issues.
Regards
Abhijit
I attempted to apply the updates again over the weeked but am still getting the invalid signature message.
I installed Repository Manager and when i try to update the repository I'm getting "Error checking repository. Root CA Untrusted for 'ftp.dell.com/.../Catalog.cab& I've verfied that I'm able to FTP directly to the site so it doesn't appear to be a connection problem.
What else can i try?
Thanks,
Jean
DELL-Rob C
4 Apprentice
•
2843 Posts
1801
0
Posted April 9th, 2012 15:00
Has your security group removed any certificate authorities in your environment? Is there a firewall in the mix?
Otherwise, I will need you to open a ticket to see if we can dig more: 800-945-3355 .
thx!
Rob
Getting the same error on our end using Dell Repository Manager 1.5. E.g.,: per C:\Users\ \AppData\Local\RepositoryManager\Log\DellRepositoryManager_Server.svclog:
DownloadBase.CheckSecurity: Root CA Untrusted for 'ftp://ftp.dell.com/FOLDER01271939M/1/ESM_Firmware_C1GG0_WN32_3.50_A00.EXE'
Who is your certificate issued by so we can check if the chain will be trusted?
DELL-Abhijit P
Community Manager
•
711 Posts
1795
0
Posted April 6th, 2012 12:00
Thanks for the update Jean.
If invalid signature message is present for all packages, it might not be a catalog issue. Can you try IISreset from commandline?
If you are familiar with Repository Manager, another quick check would be to try using Repository Manager and see if you get the same invalid signature message for one of the packages.
OME first downloads the package and then verifies signature. If signature doesn't match, it deletes the package. That's why you are seeing disappearing packages.
Regards
Abhijit