Troubleshooting
Upgrade Landing Page Redirects to Ivanti Website
Symptom When a new version of the Lenovo Patch product becomes available, the notification window is displayed including a link. When clicking on the link in the notification window from Lenovo Patch, the link takes you to an Ivanti webpage. Cause A ...
Imported Certificate Replaced by Self-Signed Certificate
Symptom This issue is usually discovered through a process similar to the following: You have successfully imported a custom certificate as your WSUS signing certificate and distributed it throughout your environment to facilitate deployment of ...
Error When Scheduling Task as Another User
Symptom When attempting to schedule any task using the Automation Scheduler interface as 'Different User' and clicking the 'Add task' or 'Edit task' button, an error message dialog appears on screen. Cause The computer or server, where the console is ...
Error: A specified logon session does not exist. It may already have been terminated
Symptom The error, "A specified logon session does not exist. It may already have been terminated" is encountered as part of a Stack Trace dump found in the Lenovo Patch.log or the DataMigrationTool.log beginning with version 2.5.586.0 orlater. Cause ...
Manifest Synchronization Error: WsusCatalog2.zip Failed Integrity Validation
Symptom In either the Lenovo Patch.log, the AutoPublish.log or both, the following error is present: Manifest synchronization error. Code=Failed, message=File 'C:\Users\USERNAME\Lenovo\Lenovo Patch\WsusCatalog2.zip' failed integrity validation: ...
Error: A certificate chain could not be built to a trusted root authority
Symptom Certificate errors are returned when validating update content downloaded by Lenovo Patch. Error details contain: "A certificate chain could not be built to a trusted root authority" Cause Specific URLs are required to be allowed through ...
Plugin Missing from Console
Symptom After installing Lenovo Patch or after upgrading to Configuration Manager 2103 and later, the Lenovo Patch plugin may be missing from Software Library > Overview > Software Updates. Upon reviewing Programs and Features, Lenovo Patch is ...
Lenovo Updates Installing Multiple Times After an OS Upgrade - Task Sequence or Windows Servicing Upgrade
Symptom After using an OS Upgrade Task Sequence, all Lenovo Updates targeted to the device will repetitively install, show waiting for restart, and then upon restart, reappear in the Software Updates in Software Center to be installed again. Lenovo ...
Published Updates are not Showing in 'All Software Updates'
Symptom Updates published using Lenovo Patch are not showing up in All Software Updates within the Configuration Manager console. OR When you are about to publish updates via Lenovo Patch, you see a message, Some of the selected updates may not ...
License Refresh: The underlying connection was closed: Could not establish trust relationship for the SSL TLS secure channel.
Problem During a publication task, the AutoPublish.log records a notification: "License Refresh: The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel." Cause The console device does not trust one ...
Error: 87D00669 - Not able to get software updates content locations at this time
Symptom Software Center or the Deployment has an error code: 0x87D00669 Error code resolves to message: Not able to get software updates content locations at this time Cause The software update content is not on a distribution point that the endpoint ...
Error: 0x87D00668 - Software update still detected as actionable after apply
Symptom Software Center or the Deployment has an error code: 0x87D00668 Error message: Software update still detected as actionable after apply Cause Either the device requires a reboot to complete the installation or the IsInstalled Rules are not ...
Error: 87D00665 - No updates to process in the job
Symptom In the console, when monitoring a deployment: OR When installing an update on a client in Software Center: The deployed software returns the error: 87D00665. The error message can be found in the UpdatesHandler.log The error resolves to "No ...
Error: 0x87D00324 - The application was not detected after installation completed
Symptom Software Center or the Deployment has an error code: 0x87D00324 Error message: The application was not detected after installation completed Cause Either the device requires a reboot to complete the installation or the IsInstalled Rules are ...
Error: 8024B303 - Updates Not Trusted on Endpoints During Installation
Symptom Updates deployed to endpoints through Configuration Manager fail with an error code of 0x8024B303 and/or an error message of "The subject is not trusted for the specific action". Cause The certificate signing the updates is not present in the ...
Error: 0x800B0109 - Updates not installing
Symptom After publishing updates from the Lenovo Patch plugin and deploying the updates using Configuration Manager, the client computer fails to install updates and receives an error on installation: 0x800B0109(-2146762487). The error is found in ...
Error: 800B0101 - Code Signing Certificate Expired
Symptom In the console, when monitoring a deployment OR On a client, in Software Center OR An error in the Configuration Checker The deployed software returns the error: 800b0101. The error translates to "A required certificate is not within its ...
Error: 'Failed to sign package; error was: 2148204810' when Publishing Updates
Symptom When publishing updates, the AutoPublish.log and Lenovo Patch.log file will show the following: Error on check 'The WSUS signing certificate is not expired.' : Valid from 2019-01-01 to 2020-01-01 Error on check 'WSUS signing certificate is in ...
Error: 'Failed to sign package; error was: 2148081670' when Publishing Updates
Symptom When using the Configuration Checker to validate the settings, an error is returned: OR When publishing updates, the AutoPublish.log will show: 'Failed to sign package; error was: 2148081670' Solution The error code resolves to 'No provider ...
Error: CreateDirectory Failed During Configuration Checker Verification or Publishing Updates
Symptom When using the Configuration Checker to verify the installation and configuration or attempting to Publish Updates, a CreateDirectory failed error may occur. Cause The permissions are incorrect on one or more of the following locations: NTFS ...
An Error (1332) Occurred While Enumerating the Group Membership. The Member SID Could Not Be Resolved
Symptom When running the Lenovo Patch Configuration Checker, a check or multiple checks for group membership returns a Fail in the result column and the details column displays An error (1332) occurred while enumerating the group membership. The ...
Error: 'Invalid Key: contact support' when attempting to validate license key
Symptom When attempting to validate the activation key in Lenovo Patch settings, an error message stating "Invalid Key: contact support" is returned. The license key cannot be validated to activate Lenovo Patch. Solution Check the following list to ...
0x8007007E - Unable to load 'SusNativeCommon.dll' or The WSUS Server could not be contacted
Symptom When Lenovo Patch is installed into the Configuration Manager console on a Windows 10 computer, initial attempts to connect to the WSUS Server returns the following error message: To further verify the issue, review the Lenovo Patch.log file ...
'Unhandled Exception has Occurred in Your Application' When Accessing the Plugin
Symptom When selecting the Lenovo Patch plugin in the Configuration Manager console, the following error is returned: Solution Refer to the Lenovo Patch: Always use 'Run As Administrator' when launching Configuration Manager Console Knowledge Base ...
Failed to retrieve updates from the specified WSUS server: The operation has timed out
Symptom When opening the Lenovo Patch plugin, the catalog fails to load and shows a "Loading" prompt, which eventually times out. In the Lenovo Patch.log file, the following error message is captured: Failed to retrieve updates from the specified ...
Error Accessing the WSUS Signing Certificate
Symptom The Configuration Checker returns a failure on the check 'A WSUS Signing Certificate is in place and can be accessed by the user' with a detail of 'Error accessing the WSUS signing certificate. The certificate does not exist or your account ...
Error: Cannot Connect to WSUS Server
Symptom Despite fulfilling all the prerequisites in the Lenovo Patch documentation, some users may still find themselves unable to connect the plug-in to their WSUS server. Cause This issue appears to be related to a User Account Control (UAC) issue. ...
Obtaining and Viewing Logs
Purpose This document provides information about where to obtain logging information related to Lenovo Patch. Description To view log files, use the CMTrace tool that ships with the Configuration Manager product. CMTrace can be found on the ...
Popular Articles
ThinkShield Firmware Assurance Reference Documents
Terms & Conditions including our Privacy Statement are available on the portal under Preferences. To access this information, click the arrow icon next to your name on the top right corner of the portal, then select Preferences.
Using the Dashboard
The Dashboard displays data from the entire fleet of devices through various graphs, bar charts, and visual elements, helping users quickly grasp trends and key metrics. As the landing page, it is the first interface users see when accessing the ...
About TSFA Agent UI and CLI
TSFA Agent UI ThinkShield Firmware Assurance (TSFA) is a tool based on UDC that, once installed on a device, retrieves security event logs from the device's embedded controller and uploads them to the cloud. These logs can then be viewed on a cloud ...
Creating and Managing User Groups
Grouping users is helpful for managing a large number of users - typically by geography, department, or role. Creating User Groups Navigate to User Management > User Groups. Click ✚ Create Group button. In the Add group screen, fill in the group ...
Managing Devices within TSFA
To access devices within your organization's portal, navigate to Devices Manager > Devices. Device Table The Device Table provides regular information pertaining to each device, such as Device Name and Type, Serial Number, License, etc. It also ...