SCUP 2011 with Timestamp enabled and a Proxy

This week I tried to get SCUP up and running behind a proxy server. SCUP has a nice option to define the proxy server in the GUI.

image

This works great for the download of updates, but the signing with a timestamp still fails with the following error:

PublishItem: InvalidException occurred during publishing: Verification of file signature failed for file: \\server02\UpdateServicesPackages\b8c423dd-e1d8-454e-82b7-603f07242fa3\f9c6a6e0-as43-472f-ac44-863e9e0badef_1.cab Updates Publisher 20/8/2013 9:33:07 AM 5 (0x0005)

Publish: A fatal error occurred during publishing :Signature verification exception during publish, verify the WSUS certificates and advanced timestamp setting are properly configured. Updates Publisher 20/8/2013 9:33:07 AM 5 (0x0005)

 

After some investigation I could locate the problem. The problem is, that the timestamp function is executed under system account permissions and the proxy defined in Internet Explorer is used. This means, we have to set the “DefaultConnectionSettings” Value in the “HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections” registry key.

The easiest way to do this is to copy the settings from your user account “HKEY_CURRENT_USER\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections”.

Thomas Kurth
Follow me

Thomas Kurth

Principal Workplace Consultant at baseVISION AG
I’m a consultant, trainer and architect for workplace management and enterprise mobility projects with Microsoft Technologies in the past eight years. I love to push and design the modern workplace based on Windows 10, EM&S and O365 for my customers which is the only answer for the current security threats, agile world and the fast-changing business requirements of my customers. Important for me is to simplify and automate the operational processes, because there are the highest costs.

MCSEMCTCMCE
Thomas Kurth
Follow me