#5 troubleshoot: Couldn’t verify ‘C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.msi’ authenticode signature. Return code 0x800b0101 in ccmsetup.log

I was deploying Windows 7 en 8 images, but after copying the setup files en installing the Configmgr Client it stops. I don’t get any warnings or information about the stop. So, I have searched for the error in the logs.

You see in the SMSTS.log (located in C:\Windows\Temp) a failure look like this:

Hmm ok? But the client setup has own log file, maybe better to understand. This log file is located in C:\Windows\ccmsetup\Logs\ccmsetup.log

Now we see a better warning why the setup stops. The failure is Couldn’t verify ‘C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.msi’ authenticode signature. Return code 0x800b0101

What I found on the Internet is that this is a bug in Service Pack 1. Microsoft has released a hotfix for Windows 7 and the old OS versions. Windows 8 has also a hotfix for this problem.

There is 2 methods to solve this.

Method 1:

This hotfix is for al site servers. Install this KB2801987 to all site servers in your hierarchy.

Method 2:

For Win7 and beneath that look at this link: KB2749655

For Win8 look at this link: KB2756872

This hotfix must be installed before installing the Configmgr client (duh). This means you have to update your images. There is an easy way to do that.

Open the command prompt (run as administrator) and go to the directory where the hotfix is located. (on SCCM server!)

In my example is that E:\Resource\hotfix\win7\Windows6.1-KB2749655-x64.msu

We have to extract the MSU file. We need the cab file inside the MSU file. So type in:

Windows6.1-KB2749655-x64.msu /extract:E:\Resource\hotfix\win7\

Like this:

Now we have some files in the Win7 directory. Two of the files is .cab.

Next step is mounting the WIM file. Run this commando to mount the image to a folder. First create a folder. In my example is E:\mount

Then run this commado:

DISM /mount-wim /wimfile:E:\resource\images\win7.wim /index:1 /mountdir:E:\mount

This can take a few minutes.

Then, DISM /image:E:\mount /Add-Package /PackagePath:E\resource\hotfix\win7\Windows6.1-KB2749655-x64.cab

You will get this:

You are done. You have to unmount the WIM file by this commando:

DISM /Unmount-WIM /Mountdir:E:\mount /Commit

Like this:

And to this also with Windows 8 images.

Last step before test it/ deploying it. Update your distribution point by right click on the Windows 7 image and choose for Update Distribution Points.

That’s all folks.


One thought on “#5 troubleshoot: Couldn’t verify ‘C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.msi’ authenticode signature. Return code 0x800b0101 in ccmsetup.log

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google+ photo

You are commenting using your Google+ account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )


Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.