Sccm 2012 Clients are not Installing Updates

[Naveed_786]

Dear All,

 

I am having a problem in SCCM 2012 clients, all clients unable to install updates, while troubleshooting i saw the certificate which has expired please view the attached image file,

 

I Google the issue and found that a hot fix (ConfigMgr2012-SP1-KB2801987-X64-ENU) is released for this issue when i try to install that hot fix it gives me error

 

"This update applies to product version 5.0.7804 but the version found locally is 5.0.7711.0, this update is not applicable to this system."

 

 

Please help me to resolve this issue.

 

Thanks in advance.

 

[Peter van der Woude]

Two things:

1. The certificate is NOT expired, as it is valid from 6 /25/ 2012 to 6/ 25/ 2013. The red cross just means that the root certificate is not trusted, which is not a problem.
2. KB2801987 is applicable on SP1.

[Naveed_786]

1. Thanks Peter for your reply i have tried to install KB2801987 but it gives error as i mentioned in my previous post error message was

 

"This update applies to product version 5.0.7804 but the version found locally is 5.0.7711.0, this update is not applicable to this system."

 

2. And the certificate will expire on 6/ 25/ 2013 ????

 

3. And what should i do if the certificate expires????

[iamthew4lrus789]

I'm having this issue too

[stephen19985]

Hi,

 

I had the same issue and found that i was trying to install the SP1 CU1 update rather than the SP1 update. SCCM 2012 needs SP1 before SP1 CU1.

I had to download SW_DVD5_Sys_Ctr_2012w_SP1_Config_Mgr_EndPt_Protection_MultiLang_-2_X18-84756.ISO from our volume licensing to isntall SP1.

 

Hope this helps

Stephen

[malarjul]

Hi, i had the same problem and i fix it whith this article

 

For all Configuration Manager releases

Install the certificate file available in this hotfix KB3060648 to manually renew the Asset Intelligence certificate.

To do this, follow these steps:

1. Go to the "Hotfix Download Available" section at the top of this Knowledge Base article to download the hotfix package named ConfigMgrAICert-KB3060648.exe.
2. Double-click the hotfix package to open the Microsoft Self-Extractor dialog box, click Yes to accept the License Agreement, select a location for the extracted files, and click OK to continue and unzip the files.
3. Run the ConfigMgrAICert-KB3060648.exe file to extract the 8EBC7D60-4ACA-07F2-7004-A799B2C2B096.pfx certificate file to a location that can be accessed by the site server.
4. In the Configuration Manager console, find the computer name of the Asset Intelligence synchronization point server in the following location:
   
   For System Center Configuration Manager 2007
   System Center Configuration Manager\Site Database (site code, site name)\Site Settings\Site Systems
   
   For all System Center 2012 Configuration Manager products …
   Administration\Overview\Site Configuration\Servers and Site System Roles
5. Right-click the Asset Intelligence synchronization point, and then click Properties.
6. Click the General tab, specify the path of the certificate file, and then click OK.

Note You do not have to reset the System Center Online Point server role or restart the AI_UPDATE_SERVICE_POINT service after you re-enable the Asset Intelligence synchronization point by using the new certificate. You only have to perform the synchronization again.

 

 

https://support.microsoft.com/en-us/kb/3060648

 

 

Regards.