WSUS 3 installing SP3


I have installed a new server with wsus 3 SP1. GPO is configured ok as computers are showing in the console. I checked SP3 for installation on XP computers and the installation is failing with a error as below. The code is from windowsupdate.log from one of the computers generally the error is everywhere the same. Can you tell me where the problem is?

2009-02-10	11:19:25:436	 796	ac4	DnldMgr	BITS job {52AD4851-FFCB-4F67-962B-7456CF9531BE} completed successfully
2009-02-10	11:19:28:218	 796	ac4	Misc	Validating signature for C:\WINNT\SoftwareDistribution\Download\a4eb665c3bb181f828e971a553e4ae5f\WindowsXP-KB936929-SP3-x86-PLK.exe:
2009-02-10	11:19:28:218	 796	ac4	Misc	WARNING: Error: 0x800b0003 when verifying trust for C:\WINNT\SoftwareDistribution\Download\a4eb665c3bb181f828e971a553e4ae5f\WindowsXP-KB936929-SP3-x86-PLK.exe
2009-02-10	11:19:28:218	 796	ac4	Misc	WARNING: Digital Signatures on file C:\WINNT\SoftwareDistribution\Download\a4eb665c3bb181f828e971a553e4ae5f\WindowsXP-KB936929-SP3-x86-PLK.exe are not trusted: Error 0x800b0003
2009-02-10	11:19:28:233	 796	ac4	DnldMgr	WARNING: File failed postprocessing, error = 800b0003
2009-02-10	11:19:28:233	 796	ac4	DnldMgr	Failed file: URL = 'http://WSUSSERVER.DOMAIN.COM/Content/1C/7CBE718131E9C71B322F1149E86BEDBA351BA11C.exe', Local path = 'C:\WINNT\SoftwareDistribution\Download\a4eb665c3bb181f828e971a553e4ae5f\WindowsXP-KB936929-SP3-x86-PLK.exe'
2009-02-10	11:19:28:233	 796	ac4	DnldMgr	Error 0x800b0003 occurred while downloading update; notifying dependent calls.
2009-02-10	11:19:28:264	 796	194	AU	>>##  RESUMED  ## AU: Download update [UpdateId = {34B52415-A5BA-41E9-8072-9D2DEE8B22A9}]
2009-02-10	11:19:28:264	 796	194	AU	  # WARNING: Download failed, error = 0x800B0003
2009-02-10	11:19:28:280	 796	194	AU	#########
2009-02-10	11:19:28:280	 796	194	AU	##  END  ##  AU: Download updates
2009-02-10	11:19:28:280	 796	194	AU	#############
2009-02-10	11:19:28:280	 796	194	AU	Setting AU scheduled install time to 2009-02-11 07:00:00
2009-02-10	11:19:33:280	 796	980	Report	REPORT EVENT: {5AFBB67A-684A-4E4E-A819-F1BABD4B0C1F}	2009-02-10 11:19:28:280+0100	1	161	101	{34B52415-A5BA-41E9-8072-9D2DEE8B22A9}	110	800b0003	AutomaticUpdates	Failure	Content Download	Error: Download failed.
2009-02-10	11:24:51:017	 796	980	Report	Uploading 4 events using cached cookie, reporting URL = http://WSUSSERVER.DOMAIN.COM/ReportingWebService/ReportingWebService.asmx
2009-02-10	11:24:51:033	 796	980	Report	Reporter successfully uploaded 4 events.
2009-02-10	11:47:56:363	 796	d78	AU	AU received policy change subscription event

Open in new window

Who is Participating?
How are you getting on with this? Have any of the suggestions here worked?

If you could let us know if trying a manual installation is successful or not, it can help narrow down the cause.
Michael PfisterCommented:
It has a problem with the signature of the SP3 package.

"0x800B0003         -2146762749         TRUST_E_SUBJECT_FORM_UNKNOWN         The form specified by the subject is not one supported or known by the specified trust provider"

Not very helpful though. Does SP3 install when downloaded and installed manually?
Does it install when you start C:\WINNT\SoftwareDistribution\Download\a4eb665c3bb181f828e971a553e4ae5f\WindowsXP-KB936929-SP3-x86-PLK.exe on the client your log is from?
It could be your antivirus software is interfering with the package. Do the same tests and before starting the .exe disable the antivirus scanner.
kamsujAuthor Commented:
strange... there is no such file C:\WINNT\SoftwareDistribution\Download\a4eb665c3bb181f828e971a553e4ae5f\WindowsXP-KB936929-SP3-x86-PLK.exe on the client computer. As I understand there should be one?
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Michael PfisterCommented:
On the client where you took the log, yes. I believe the first part of the file name gets randomly generated, so look for a big file in C:\WINNT\SoftwareDistribution\Download\
I suggest, to deploy SP3 manually if you have, i have seen a lot of problems when deployin via WSUS3. specially Laptop users, it took a lot of time to shutdown and made them frustrated.
kamsujAuthor Commented:
cobra09 - manual installation is not possible as we have about 2000 computers.
I would suggest following cobra09's suggestion and try manually installing the update - just one one machine to see if you get a similar error.

If you do get a similar error, it might be worth following some of the troubleshooting steps in this KB article (again manually, just on one machine.... then if you find a working solution there, we can look at automating it):
kamsujAuthor Commented:
i see that the file SP3 is on the server it has about 320MB and the client tries to download it creates the tmp file and then deletes it writing to the log this information about signing.
You should browse the WSUSContent share (you'll need to run a search and look for the 320mb file that way), copy the installer to a single workstation and manually run it....

It will help to know if you get the same problems when running manually as administrator, without directly involving WSUS.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.