SCCM 2012 SP1 Client push fails with Authenticode Signature error

There is a problem with Client Push installation in Microsoft System Center Configuration Manager 2012 SP1. One of the prerequisites, MicrosoftPolicyPlatformSetup.msi, which comes during the ccmsetup installation is digitally signed and the signature expired on 10-01-2012. Therefore Client Installation cannot be performed!

Following error will appear in the ccmsetup.log:


Couldn’t verify ‘C:\Windows\ccmsetup\MicrosoftPolicyPlatformSetup.msi’ authenticode signature. Return code 0x800b0101


Now what?!


Microsoft has released an update for this issue. Problem is that when you have your current images depending on SCCM for updates this will be a catch-22 situation!

Client will not install and updates will not be pushed to the clients…

You can off-line service your image with the following update, or use DSIM!



With this update installed you will be able to install your SCCM 2012 Clients again.

Let’s see if Microsoft will release an update for SCCM soon…

Well Microsoft was quick 😉

Hotfix available:

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: