Microsoft KB Archive/941440

= The scan process fails when the SMS 2003 Inventory Tool for Microsoft Updates tries to scan Microsoft Windows 2000-based SMS 2003 client computers for compliance =

Article ID: 941440

Article Last Modified on 8/15/2007

-

APPLIES TO


 * Microsoft Systems Management Server 2003

-



Important This article contains information about how to modify the registry. Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs. For more information about how to back up, restore, and modify the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows registry



SYMPTOMS
Consider the following scenario. The Microsoft Systems Management Server (SMS) 2003 Inventory Tool for Microsoft Updates (ITMU) tries to scan SMS 2003 client computers for compliance. These SMS 2003 client computers are Microsoft Windows 2000-based. In this scenario, the scan process fails.

Additionally, log files that are located on the SMS client computer contain error messages that resemble the following.

The Scanwrapper.log file
ERROR: Failed while processing the executable. Cmdline=[&quot;%windir%\system32\VPCache\Packagename\SmsWusHandler.exe&quot;

/Catalog:%windir%\system32\VPCache\Packagename\wsusscn2.cab

/OutputXml:%windir%\system32\VPCache\Packagename\Results.xml],

CurrentDir=[%windir%\system32\VPCache\Packagename], ExitCode=[265] Software

Updates Scan Tool 8/12/2007 3:05:03 PM 884 (0x0374)

Loaded &quot;%windir%\system32\CCM\smscstat.dll&quot;; the module handle is 0x188F0000.

Software Updates Scan Tool 8/12/2007 3:05:03 PM 884 (0x0374)

CreateSMSStatusMessage succeeded; the status message object handle is 0x00ACF7D0.

Software Updates Scan Tool 8/12/2007 3:05:03 PM 884 (0x0374)

ReportSMSStatusMessage succeeded.

Software Updates Scan Tool 8/12/2007 3:05:04 PM 884 (0x0374)

ERROR: An error was encountered. Exiting Scan process ... Software Updates Scan Tool 8/12/2007 3:05:04 PM 884 (0x0374)

The Smswushandler.log file
Registering a new scan package service with the Windows Update Agent.

SmsWusHandler 8/12/2007 4:13:01 PM 804 (0x0324)

ERROR : AddScanPackageService failed, win32 error code = 0 SmsWusHandler

8/12/2007 4:13:02 PM 804 (0x0324)

ERROR: Search failed with hRes=0x800b0109 SmsWusHandler 8/12/2007 4:13:02 PM

804 (0x0324) 0x800b0109 is the hresult value for the operation. Returning 265 as the exit code. SmsWusHandler 8/12/2007 4:13:02 PM 804 (0x0324)

The WindowsUpdate.log file
2007-08-11 13:05:22:291 652 4e0 Misc

WARNING: Error: 0x800b0109 when verifying trust for \WINNT\SoftwareDistribution\ScanFile\498d12b1-5a70-4bf4-af7a-161e9c458e46\Source.cab

2007-08-11 13:05:22:291 652 4e0 Misc WARNING: Digital Signatures on file \WINNT\SoftwareDistribution\ScanFile\498d12b1-5a70-4bf4-af7a-161e9c458e46\Source.cab are not trusted: Error 0x800b0109 2007-08-11 13:05:22:291 652 4e0 OfflSnc

WARNING: failed to verify signature for offline cab. hr = 0x800b0109 2007-08-11 13:05:22:501 652 4e0 PT WARNING: PTError: 0x800b0109

2007-08-11 13:05:22:501 652 4e0 Agent WARNING: WU client fails CClientCallRecorder::OpenOfflineSyncSource with error 0x800b0109 2007-08-11 13:05:22:501 1128 4a4 COMAPI WARNING: ISusInternal::OpenOfflineSyncSource failed, hr=800B0109



CAUSE
This issue occurs when the September 2006 release of the Microsoft root certificates update is not successfully installed on the Windows 2000-based SMS client computer. The Microsoft root certificates update that released in September 2006 was not distributed by ITMU. This is because the Microsoft root certificates update was not released as a security update, an update rollup, or a service pack.



RESOLUTION
To resolve this issue, you must download and install the September 2006 release of the Microsoft root certificates update. To do this, follow these steps:  Download the September 2006 release of the Microsoft root certificates update. To do this, follow these steps:  Log on to the SMS Site Server by using an account that has administrative permissions. In Microsoft Internet Explorer, visit the following Microsoft Web site:

http://catalog.update.microsoft.com/v7/site/Home.aspx

 Copy the following Root Certificates Update number:

d1b4fccb-384d-489e-a709-845116887f36

 On the Microsoft Update Catalog Web page, paste the number in the Search box, and then click Search. Click Add to add the Root Certificates Update to your basket, and then click view the basket.</li> Click Download.</li> In the Download Options dialog box, click Browse to select a folder where you want to save the file, and then click Continue.</li> When the Download completes, click Close.</li></ol> </li> Distribute the Microsoft root certificates update by using SMS Software Distribution. To do this, follow these steps: <ol style="list-style-type: lower-alpha;"> Click Start, point to All Programs, click Systems Management Server, and then click SMS Administrator Console.</li> Expand Site Database , right-click Packages, click New, and then click Package.</li> In the Package Properties dialog box, type a name that you want to use for the package, and then click the Data Source tab.</li> On the Data Source tab, click to select the This package contains source files check box, click Set to specify the source directory, and then click OK.</li> In the SMS Administrator Console, expand the package that you created, right-click Programs, click New, and then click Program.</li> Type a name for the new program.</li> In the Command line box, type the following, and then click OK:

X86-all-rootsupd_fe44934fd80dd11fec2f0f9b24431658a4f6d589.exe /q:a /r:n

</li> In the SMS Administrator Console, right-click the package, point to All Tasks, and then click Distribute Software.</li> Follow the steps in the Distribute Software Wizard to specify a distribution point and to advertise the package to all Windows 2000-based SMS client computers.</li></ol> </li></ol>

Note You do not have to restart the SMS client computer after you install this update.

<div class="moreinformation_section">

MORE INFORMATION
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To determine whether the Microsoft root certificates update is already installed on a Windows 2000-based computer, follow these steps: <ol> Log on to the Windows 2000-based computer by using an account that has administrative permissions.</li> Click Start, click Run, type regedit, and then click OK.</li> In Registry Editor, locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\ Software\Microsoft\Active Setup\Installed Components\{EF289A85-8E57-408d-BE47-73B55609861A

</li> <li>Make sure that the following subkeys are configured as follows: <ul> <li>The value of the Version subkey set to 9.0.2195.0.</li> <li>The value of the IsInstalled subkey is set to 1.</li></ul>

If these subkeys do not have these values, you must install the Microsoft root certificates update.</li></ol>

Keywords: kbtshoot kbexpertiseinter kbprb KB941440

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.