CMSG_CTRL_VERIFY_SIGNATURE
Question
Hi Experts,
We are trying to upgrade BIOS and Drivers of the devices however frequently on many devices we are getting same error in SMSTS.Log
Attached the screenshot.
Akash Thapa 
Leave an answer
Sorry, you do not have permission to answer to this question .
Answers ( 3 )
Hello – I can’t see the screenshots.
It would be more useful to get a snippet of the SMSTS.log file rather than screenshots.
Before looking into logs ..let’s understand how to read SMSTS.log from here https://www.anoopcnair.com/sccm-osd-task-sequence-ultimate-guide/
Client : GUID:1844a29f-eec8-4654-ab12-86dd462fe913 OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Current BG : true OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Neighbor BG : true OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Running module version 5.0.8968.1000 from location ‘C:\WINDOWS\CCM\OSDDownloadContent.exe’ RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Fallback to site default BG: true OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
OSDDownloadDownloadPackages = KO1008CF RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Peers allowed: 0 OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
OSDDownloadDestinationLocationType = Custom RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Internet : false OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
OSDDownloadContinueDownloadOnError = 0 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Packages will be downloaded to custom download location: ‘C:\_SMSTaskSequence\DriverPackage’ RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Getting package content: KO1008CF, version: 0 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
GetPackageContent: RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Resolving content for SMS Package KO1008CF RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Site Code KO2 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
MP eudvXXXXXXX003.XXXXXNET.COM RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
TSPkgVar _SMSTSKO1008CF RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
RunFromDPEnabled false RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
ForceRunFromNet: 0 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Resolving local content for KO1008CF:0 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO100778, Source Version = 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO1009E1, Source Version = 4 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO1006B6, Source Version = 5 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = 7ad41944-af1d-408d-a905-67cdbeaddf29, Source Version = 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = 7e56a4b3-31e3-4682-9cc5-bb7f1a9fc758, Source Version = 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO10081E, Source Version = 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO10081D, Source Version = 2 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO10081F, Source Version = 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Package ID = KO1009D3, Source Version = 2 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Setting URL = eudXXXXXXXX00X.XXXXXNET.COM, Ports = 80,443, CRL = false RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Setting Server Certificates. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Setting Authenticator. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
::DecompressBuffer(65536) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Decompression (zlib) succeeded: original size 4685, uncompressed size 4941. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Setting Client Certificate. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Getting local network information. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
DhcpGetOriginalSubnetMask entry point is supported. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Begin checking Alternate Network Configuration RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Finished checking Alternate Network Configuration RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Adapter {E75BD226-27DC-4ED7-9A6E-1DD1DDD0ED98} is DHCP enabled. Checking quarantine status. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Adapter {59A38B8E-F5BE-42B4-A647-77240BC46218} is DHCP enabled. Checking quarantine status. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Adapter {6B8DA1E1-BD7D-4A3D-B7D5-421A97E6BC6F} is DHCP enabled. Checking quarantine status. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Adapter {AD650C9F-0D0C-488C-BCDC-10E6E03D04C1} is DHCP enabled. Checking quarantine status. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Adapter {BF05B88B-5ABC-4811-9F37-E59D268466D6} is DHCP enabled. Checking quarantine status. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Content location request (BGR): RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Sending RequestBGRContentLocations for KO1008CF OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Setting the authenticator. OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
CLibSMSMessageWinHttpTransport::Send: WinHttpOpenRequest – URL: eudXXXXXXXXXXX.XXXXXX.COM:80 CCM_POST /ccm_system/request OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Not in SSL. OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Package : KO1008CF.0 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Client : GUID:1844a29f-eec8-4654-ab12-86dd462fe913 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Current BG : true RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Neighbor BG : true RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Fallback to site default BG: true RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Peers allowed: 0 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Internet : false RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Sending RequestBGRContentLocations for KO1008CF RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Setting the authenticator. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
CLibSMSMessageWinHttpTransport::Send: WinHttpOpenRequest – URL: eudXXXXXXXX.XXXXXX.COM:80 CCM_POST /ccm_system/request RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Not in SSL. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Request was successful. OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
CryptMsgControl (hMsg, 0, CMSG_CTRL_VERIFY_SIGNATURE, pCert->pCertInfo), HRESULT=8009100e (..\libcrypt.cpp,535) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
signature varification failed OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
ipCertContext != listpServerCertContext.end(), HRESULT=80004005 (..\libsmsmessaging.cpp,2589) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
signature check failed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ownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
DoRequest (sReply, true), HRESULT=80004005 (..\libsmsmessaging.cpp,4321) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
ContentLocations.RequestBGRContentLocations(), HRESULT=80004005 (..\libsmsmessaging.cpp,10888) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
content location request failed OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
CCM::SMSMessaging::GetBGRContentLocationEx( pszPackageID, pszPackageType, lSourceVersion, pszSiteCode, pszServer, pTransport, pszClientGUID, NULL, true, NULL, bIsClientOnInternet ? true : false, lSMSBGRCLRList ), HRESULT=80004005 (..\resolvesource.cpp,2672) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Content location request failed for KO1008CF:0. (Code 0x80004005) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
TS::Utility::GetContentLocationsEx( pszPackageId, L””, lSourceVersion, sSiteCode, sManagementPoint, &oHttpTransport, sClientID, TRUE, mapNetworkAccess, TRUE, TRUE, FALSE, bIsClientOnInternet, TS::Environment::SharedEnvironment.isTrue(EnvironmentVar::DonotUseBoundaryGroups), slistSMBPaths, slistHttpPaths ), HRESULT=80004005 (..\resolvesource.cpp,5039) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Content location request for KO1008CF:0 failed, hr=0x80004005 OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Failed to download content for SMS package KO1008CF, hr=0x80004005 OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Failed to resolve the source for Package: KO1008CF, hr=0x80004005 OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Failed to download package KO1008CF, cannot continue (0x80004005) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
Process completed with exit code 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Request was successful. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
CryptMsgControl (hMsg, 0, CMSG_CTRL_VERIFY_SIGNATURE, pCert->pCertInfo), HRESULT=8009100e (..\libcrypt.cpp,535) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
signature varification failed RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
ipCertContext != listpServerCertContext.end(), HRESULT=80004005 (..\libsmsmessaging.cpp,2589) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
DoRequest (sReply, true), HRESULT=80004005 (..\libsmsmessaging.cpp,4321) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
ContentLocations.RequestBGRContentLocations(), HRESULT=80004005 (..\libsmsmessaging.cpp,10888) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
CCM::SMSMessaging::GetBGRContentLocationEx( pszPackageID, pszPackageType, lSourceVersion, pszSiteCode, pszServer, pTransport, pszClientGUID, NULL, true, NULL, bIsClientOnInternet ? true : false, lSMSBGRCLRList ), HRESULT=80004005 (..\resolvesource.cpp,2672) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
TS::Utility::GetContentLocationsEx( pszPackageId, L””, lSourceVersion, sSiteCode, sManagementPoint, &oHttpTransport, sClientID, TRUE, mapNetworkAccess, TRUE, TRUE, FALSE, bIsClientOnInternet, TS::Environment::SharedEnvironment.isTrue(EnvironmentVar::DonotUseBoundaryGroups), slistSMBPaths, slistHttpPaths ), HRESULT=80004005 (..\resolvesource.cpp,5039) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
signature check failed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unPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
content location request failed RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Content location request failed for KO1008CF:0. (Code 0x80004005) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Content location request for KO1008CF:0 failed, hr=0x80004005 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Failed to download content for SMS package KO1008CF, hr=0x80004005 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Failed to resolve the source for Package: KO1008CF, hr=0x80004005 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Failed to download package KO1008CF, cannot continue (0x80004005) RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
PowerShell command line returned code 1 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
ReleaseSource() for C:\WINDOWS\ccmcache\6. RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
reference count 1 for the source C:\WINDOWS\ccmcache\6 before releasing RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Released the resolved source C:\WINDOWS\ccmcache\6 RunPowerShellScript 3/10/2021 8:12:09 AM 7528 (0x1D68)
Process completed with exit code 1 TSManager 3/10/2021 8:12:09 AM 10436 (0x28C4)
!——————————————————————————————–! TSManager 3/10/2021 8:12:09 AM 10436 (0x28C4)
Failed to run the action: Apply_Drivers. Error 1 TSManager 3/10/2021 8:12:09 AM 10436 (0x28C4)
I hope this helps. I have no idea how to handle this issue.
signature verification failed OSDDownloadContent is the main issue
CryptMsgControl (hMsg, 0, CMSG_CTRL_VERIFY_SIGNATURE, pCert->pCertInfo), HRESULT=8009100e (..\libcrypt.cpp,535) OSDDownloadContent 3/10/2021 8:12:09 AM 15792 (0x3DB0)
?
The error code 8009100e means “Cannot find the original signer”.
Are you getting this error only for one device or all the devices are getting this error?
I will try to redistribute the packages if this is for all the devices under a particular DP.
=======
1. https://support.microsoft.com/en-us/topic/operating-system-deployment-osd-tasks-may-fail-randomly-in-system-center-configuration-manager-2007-service-pack-1-based-systems-c3ac9725-6930-6b8c-2d4f-3efd4d0785e4
2. https://social.technet.microsoft.com/Forums/systemcenter/en-US/f5c8734f-e443-4c19-90ae-a76f95994f1b/cb-1810-signature-varification-failed-during-osd-feature-update?forum=ConfigMgrCompliance