Security Compliance

A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider

Microsoft windows update install fails on some client machines with message A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider

First published date

1/24/2020 5:05 PM

Last published date

1/24/2020 5:05 PM

Overview

Had one customer today with same error, though the error was related to MS patches on 2 Server 2016 endpoints and from a previous case with similar error seen last year it popped up when installing MS KB890830

Operation: Install
Object: Update retrieval failed
Details: A certificate chain processed but terminated in a root certificate which is not trusted by the trust provider

Product section

Patch Manager

Cause

According to this post the problem might be caused by SHA-2 Code Signing Support requirement for Windows and WSUS

Resolution

1. If the error is related to MS patches, then please check the KB details for solution
2. If the error pertains to Third party patches, ensure the Create or replace a WSUS publishing certificate for third-party publishing on Endpoints where this error is received.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.