Description

In the Vaminer.log you find the following SSL error.

LoadingPatchSources : GetStreamForPath https://patch.landesk.com/LDPM8/ldvul.php failed The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.

If you open the patch location inside the IE of the core (here the European site), you get a certificate error displayed.

Cause

This is related to an untrusted root certificate in the core server’s certificate storage.

Reslution

Update the root DigiCert Root certificates, so that the certificates are trusted again.

There are two possible option to do so:

1. Install the latest Root certificate update provided by Microsoft via Windows Update.
2. Update only the DigiCert Root certificates needed for LANDesk Patch Manager
   1. Goto https://www.digicert.com/digicert-root-certificates.htm to check on the latest DigiCert root certificates hash values. These values will assure that you install the correct certificates in the later process
   2. Goto https://ev-root.digicert.com/ to install the DigiCert High Assurance EV Root CA
      1. You probably see a certificate error
      2. Click either inside the error message “show certificate” or click on the padlock symbol in the address bar of your IE to access the certificate.
      3. Change to the Certification Path tab and select the certificate marked with an red cross.
      4. Click on “view certificate”

• v. In the general tab click on “Install Certificate”
• vi. Choose “Place all certificates in the following store” and select the “Trusted Root Certification Authorities” store.

1. After you imported all certificates, close the IE again and open https://patch.landesk.com/ again.
2. There should be no error message again and the Certification Path should look as follows