Certificate Verification Failed With Error : -2146762748

Version 1

    Symptom

     

    STDeployerCore.log

    2018-06-01T11:28:44.2093405Z 171c I Authenticode.cpp:134 Verifying signature of C:\Program Files\LANDesk\LDClient\sdmcache\jre-8u172-windows-i586_tw14468-39207.exe with CWinTrustVerifier

    2018-06-01T11:29:03.2302424Z 171c E WinTrustVerifier.cpp:270 Certificate verification failed with error: -2146762748.

     

    Vulscan.log

    Fri, 01 Jun 2018 07:29:30 ReportRepairResult returned failure: Repair failed, patch still missing.

    Fri, 01 Jun 2018 07:29:30 Message returned from repair script was Repair failed, patch still missing.

    Fri, 01 Jun 2018 07:29:30 ERROR(RunVbScript) Failed to run command  - 80004005

     

    Cause

     

    The OS is unable to verify the digital signature. The specific error is -2146762748 which is a Mircosoft error that translates to "The subject is not trusted for the specified action"

     

    Resolution

     

    1) Update the Root Certificate on the client machine.

    2) Usually you can get the cert needed from the Patch itself.

         Right click>go to properties>Digital Signatures

         Highlight the cert and click details, this will bring up the Digital Signature Details, click View Certificate

         From there you can obtain the Certificate

         Also click the certification path on the certificate properties, this will also idicate if you have all the neccessary intermediate certificates also