Hello, I've recently installed a new setup of SCCM to a new 2k8R2 machine. SCCM is R2 and SP2. Whenever I try to install a client i'm getting the messageFile 'C:\Windows\system32\ccmsetup\{4CD82FBB-0AFC-4864-A089-15364DF5F14B}\client.msi' doesn't have a valid digital signature.I've checked the file in question, and as far as I can tell, it DOES have a digital signature that appears to be valid. I've tried downloading the prereqs again, into a different folder, I don't 'see any difference between them and the original folder, but I tried it anyway.I have also run the SP2 upgrade again, specifying the new prereq folder and am still getting the same error.The clients that are failing are.. (besides all of them) Win2k8 (non r2), Win 7, Win XP pro (sp3), or.. all of them...Any suggestions?here is a copy of the ccmsetup.log hopefully someone smarter than I can spot something useful I'm missing.==========[ ccmsetup started in process 2376 ]==========ccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)Version: 4.0.5931.0000ccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.ccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)Command line: "C:\Windows\ccmsetup.exe" /mp:POSEIDON /service SMSSITECODE=JC2ccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)Updated security on object C:\WINDOWS\system32\ccmsetup\.ccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.ccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)Ccmsetup is not registered in the Run keyccmsetup12/4/2009 11:53:15 AM3088 (0x0C10)Successfully deleted existing ccmsetup.execcmsetup12/4/2009 11:53:16 AM3088 (0x0C10)Downloading file C:\Windows\ccmsetup.execcmsetup12/4/2009 11:53:16 AM3088 (0x0C10)Downloading C:\Windows\ccmsetup.exe to C:\WINDOWS\system32\ccmsetup\ccmsetup.execcmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 10% complete (65536 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 21% complete (131072 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 32% complete (196608 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 42% complete (262144 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 53% complete (327680 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 64% complete (393216 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 74% complete (458752 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 85% complete (524288 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 96% complete (589824 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)File download 100% complete (612216 of 612216 bytes).ccmsetup12/4/2009 11:53:16 AM3088 (0x0C10)Download complete.ccmsetup12/4/2009 11:53:17 AM3088 (0x0C10)Successfully created the ccmsetup serviceccmsetup12/4/2009 11:53:17 AM3088 (0x0C10)==========[ ccmsetup started in process 4036 ]==========ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Version: 4.0.5931.0000ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Command line parameters for ccmsetup have been specified. No registry lookup for command line parameters is required.ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Command line: "C:\WINDOWS\system32\ccmsetup\ccmsetup.exe" /runservice /mp:POSEIDON SMSSITECODE=JC2ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)CCMHTTPPORT: 80ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)CCMHTTPSPORT: 443ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)CCMHTTPSSTATE: 2147483648ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)CCMHTTPSCERTNAME: ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)FSP: ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Config file: ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Retry time: 10 minute(s)ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)MSI log file: ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)MSI properties: SMSSITECODE="JC2" CCMHTTPPORT="80" CCMHTTPSPORT="443"ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Source List:ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)MPs:ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C) POSEIDONccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Updated security on object C:\WINDOWS\system32\ccmsetup\.ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)A Fallback Status Point has not been specified. Message with STATEID='100' will not be sent.ccmsetup12/4/2009 11:53:17 AM3740 (0x0E9C)Running as user "SYSTEM"ccmsetup12/4/2009 11:53:17 AM1648 (0x0670)Successfully started the ccmsetup serviceccmsetup12/4/2009 11:53:17 AM3088 (0x0C10)Detected 16018 MB free disk space on system drive.ccmsetup12/4/2009 11:53:17 AM1648 (0x0670)DetectWindowsEmbeddedFBWF() Detecting OS Versionccmsetup12/4/2009 11:53:17 AM1648 (0x0670)Client OS is not Windows XP Embeddedccmsetup12/4/2009 11:53:17 AM1648 (0x0670)Waiting for existing instances of ccmsetup to exit.ccmsetup12/4/2009 11:53:17 AM1648 (0x0670)Deleted file C:\WINDOWS\system32\ccmsetup\ccmsetup.exe.downloadccmsetup12/4/2009 11:53:17 AM3088 (0x0C10)All other instances of ccmsetup have completed.ccmsetup12/4/2009 11:53:17 AM1648 (0x0670)Successfully ran BITS check.ccmsetup12/4/2009 11:53:18 AM1648 (0x0670)Client SSL is disabled. Setting state to 0x0.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Certificate doesn't have EKU, meaning good for all usages.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Select first cert flag is set, choosing the first certificate valid for ConfigMgr usage.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Verified file 'C:\WINDOWS\system32\ccmsetup\ccmsetup.cab' is MS signed.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Successfully extracted manifest file C:\WINDOWS\system32\ccmsetup\ccmsetup.xml from file C:\WINDOWS\system32\ccmsetup\ccmsetup.cab.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Loading manifest file: C:\WINDOWS\system32\ccmsetup\ccmsetup.xmlccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Successfully loaded ccmsetup manifest file.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Couldn't get directory list for directory 'http://POSEIDON/CCM_Client/ClientPatch'. This directory may not exist.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Adding file 'http://POSEIDON:80/CCM_Client/i386/client.msi' to BITS job, saving as 'C:\WINDOWS\system32\ccmsetup\client.msi'.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Couldn't get directory list for directory 'http://POSEIDON/CCM_Client/i386/00000409'. This directory may not exist.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Starting BITS download for client deployment files.ccmsetup12/4/2009 11:53:19 AM1648 (0x0670)Download Update: Connecting to the server.ccmsetup12/4/2009 11:53:20 AM1648 (0x0670)Successfully completed BITS download for client deployment files.ccmsetup12/4/2009 11:56:33 AM1648 (0x0670)Successfully downloaded client files via BITS.ccmsetup12/4/2009 11:56:33 AM1648 (0x0670)Updated security on object C:\WINDOWS\system32\ccmsetup\.ccmsetup12/4/2009 11:56:33 AM1648 (0x0670)An MP does not exist on this machine.ccmsetup12/4/2009 11:56:33 AM1648 (0x0670)Client is installed but is a different SKU. Initiating install.ccmsetup12/4/2009 11:56:37 AM1648 (0x0670)Installing version 4.00.6487.2000 of the client with product code {2609EDF1-34C4-4B03-B634-55F3B3BC4931}ccmsetup12/4/2009 11:56:37 AM1648 (0x0670)MSI PROPERTIES are SMSSITECODE="JC2" CCMHTTPPORT="80" CCMHTTPSPORT="443" INSTALL=ALLccmsetup12/4/2009 11:56:37 AM1648 (0x0670)There are no certificate(s) that meet the criteria.ccmsetup12/4/2009 11:56:37 AM1648 (0x0670)Failed in GetCertificate(...): 0x80040281ccmsetup12/4/2009 11:56:37 AM1648 (0x0670)File 'C:\WINDOWS\system32\ccmsetup\{4CD82FBB-0AFC-4864-A089-15364DF5F14B}\client.msi' doesn't have a valid digital signature.ccmsetup12/4/2009 11:56:37 AM1648 (0x0670)A Fallback Status Point has not been specified. Message with STATEID='316' will not be sent.ccmsetup12/4/2009 11:56:37 AM1648 (0x0670)

May be helpful?http://www.myitforum.com/forums/m_210756/mpage_1/key_/tm.htm#211124

Very useful.. it wasn't "exactly" the same issue, but I was able to figure it out from there, thank you very much.The problem turned out to be the version of the ccmsetup file was not getting updated in all locations, such as the servers own windows\system32 directory.. I did a search across the entire server and replaced all the old outdated ccmsetup files with the SP2 versions, and that seems to have helped.Also.. I'm using the "right click tools" for SCCM, and I found an outdated copy of ccmsetup in there as well, replaced it also and voila.....!!thanks again, I knew there had to be a simple explanatin for this issue, and it was rather simple..!

Halidan,How did you change the settings with "right click tools"? I am looking everywhere for it and cant find it.

I think what you are looking for is the install directory for the "right click tools" The default directory it gets installed in is c:\windows\sccmtools (*I think*) in that directory you'll find an older (SP1?) version of ccmsetup.exe. Replace it with the correct version and you should be good to go, at least, that is what worked for me. I also copied the ccmsetup.cab file as well, but i'm not sure it was really needed to be in that directory.There were no "settings" in the right click tools to change, just replace the ccmsetup with the correct version of the file, once I replaced all the old versions I stopped getting the invalid digital signature error message.Good luck.

You are correct Halidan. Thanks. I modified all settings and things are working.

If you get this error whilst installing the SCCM agent then that could mean that you’re executing an older version of the ccmsetup.exe file. This can happen if you’re using the SCCM right-click tool or if the computer was previously installed with an older version of SCCM agent e.g. SP1 and you’re still using that to trigger an install of the agent. Be sure to get the latest ccmsetup.exe file from the Program Files folder after you’ve upgraded your site to SP2 or any higher. Enjoy!!!

Hello, I am having the exact same issue. No matter which way I try to install the client, I keep getting the same error message. I tried to click the link - http://www.myitforum.com/forums/m_210756/mpage_1/key_/tm.htm#211124 but the page cannot be found. Any ideas on what I can try to resolve this issue? Thanks

Here is the updated page http://www.myitforum.com/Forums/tm.aspx?high=&m=210756&mpage=1#211124 link.http://www.enhansoft.com/