English Community

Software and Operating SystemLenovo Patch for SCCM
All Forum Topics
Options

7 Posts

08-14-2020

BE

7 Signins

20 Page Views

  • Posts: 7
  • Registered: ‎08-14-2020
  • Location: BE
  • Views: 20
  • Message 1 of 14

Lenovo Patch SCCM certificate

2020-08-14, 9:42 AM

I'm trying to setup the Lenovo Patch solution on our test environment, but I'm stuck at the certificate part.

We already have a certificate in place as we are using HTTPS communication for all our clients.

 

Can I use the current certificate we already setup as well for Lenovo patch, and if not, how will this affect the communication.

It looks like updating this certificate will change the certificate set in IIS for client communication.

 

Thanks for providing a clear explanation what needs to be done, and how this is changing other (certifcate) related parts in SCCM.

 

 

Reply
Options

1565 Posts

03-03-2016

US

3785 Signins

45258 Page Views

  • Posts: 1565
  • Registered: ‎03-03-2016
  • Location: US
  • Views: 45258
  • Message 2 of 14

Re:Lenovo Patch SCCM certificate

2020-08-15, 3:58 AM

@brtvngl 

 

To sign updates using a certificate from an Internal CA has a few requirements.

 

The first requirement is to Import a Code Signing Certificate generated by the Internal CA.  The requirements for the Code Signing Certificate can be found in the Lenovo Patch User Guide in Appendix B

 

The next requirement to import a Code Signing Certificate generated by the Internal CA is that Lenovo Patch has to be configured to operate on secured connection (HTTPS/SSL).  In the Lenovo Patch Settings, on the WSUS Settings tab, choose the port 8531.  This will force Lenovo Patch to communicate with the WSUS Server over HTTPS/SSL.

 

Since Lenovo Patch will need to communicate over HTTPS/SSL, WSUS will need to be configured to communicate over HTTPS/SSL, which will require a IIS on the WSUS server to be configured with a web server certificate from the Internal CA.  Here is a Microsoft Blog on the setup.  If there is already a certificate issued to the SUP, you can use it to secure the WSUS Website.

 

TLawson 

Reply
Options

7 Posts

08-14-2020

BE

7 Signins

20 Page Views

  • Posts: 7
  • Registered: ‎08-14-2020
  • Location: BE
  • Views: 20
  • Message 3 of 14

Re:Lenovo Patch SCCM certificate

2020-08-17, 14:57 PM

@tlawson 

thanks for the info - so I used the Cert already published to the DP, and that seems to work fine, but now a next error.

 

when using the configuration checker I get the following failure on the check: An update can be successfully published as user xxx.

It's the main SCCM admin, added to the WSUS admin group, part of the local admin group.

 

I already checked this and my settings are all correct: https://support.lenovo.com/be/en/solutions/ht510622 

What else is there to check?

 

thanks!

Reply
Options

1565 Posts

03-03-2016

US

3785 Signins

45258 Page Views

  • Posts: 1565
  • Registered: ‎03-03-2016
  • Location: US
  • Views: 45258
  • Message 4 of 14

Re:Lenovo Patch SCCM certificate

2020-08-17, 16:44 PM

@brtvngl 

 

Can you post the LenovoPatch.log file where the error occurs?  Feel free to sanitize for domain name, user name, and server names.  

 

Are you running the console as administrator as listed in this Article: https://support.lenovo.com/solutions/HT510551

 

TLawson

Reply
Options

7 Posts

08-14-2020

BE

7 Signins

20 Page Views

  • Posts: 7
  • Registered: ‎08-14-2020
  • Location: BE
  • Views: 20
  • Message 5 of 14

Re:Lenovo Patch SCCM certificate

2020-08-18, 8:49 AM

@tlawson 

 

I always run the console as admin, thanks for checking.

Requested log file is sanitized and attached.

 

Thanks!

Reply
Options

1565 Posts

03-03-2016

US

3785 Signins

45258 Page Views

  • Posts: 1565
  • Registered: ‎03-03-2016
  • Location: US
  • Views: 45258
  • Message 6 of 14

Re:Lenovo Patch SCCM certificate

2020-08-18, 20:45 PM

@brtvngl 

 

I do not see a log file.  Can you attempt to attach again?  Thank you

 

TLawson

Reply
Options

7 Posts

08-14-2020

BE

7 Signins

20 Page Views

  • Posts: 7
  • Registered: ‎08-14-2020
  • Location: BE
  • Views: 20
  • Message 7 of 14

Re:Lenovo Patch SCCM certificate

2020-08-19, 6:28 AM

@tlawson - attaching again as zip.

that seems to work now

 

thanks.

Reply
Options

1565 Posts

03-03-2016

US

3785 Signins

45258 Page Views

  • Posts: 1565
  • Registered: ‎03-03-2016
  • Location: US
  • Views: 45258
  • Message 8 of 14

Re:Lenovo Patch SCCM certificate

2020-08-20, 4:27 AM

@brtvngl 

 

Can you verify that the certificate imported into Lenovo Patch was added to the WSUS Server's Local Machine Trusted Publishers Store and the Trusted Root Certification Authorities Store?

 

TLawson

Reply
Options

7 Posts

08-14-2020

BE

7 Signins

20 Page Views

  • Posts: 7
  • Registered: ‎08-14-2020
  • Location: BE
  • Views: 20
  • Message 9 of 14

Re:Lenovo Patch SCCM certificate

2020-08-21, 12:58 PM

@tlawson 

checked and yes the certificate is in the mentioned certificate stores, as it was already in use.

Reply
Options

1565 Posts

03-03-2016

US

3785 Signins

45258 Page Views

  • Posts: 1565
  • Registered: ‎03-03-2016
  • Location: US
  • Views: 45258
  • Message 10 of 14

Re:Lenovo Patch SCCM certificate

2020-08-24, 21:47 PM

@brtvngl 

 

Just to make sure, you are attempting to import a Code Signing certificate, correct?

 

 

TLawson 

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete