Traps 4.2.3 Agent install issue - anybody similar results

[StPatrick]

Hi community,

Have upgraded ESM to v4.2.3.41131

Tried to push upgrade to client.

Failed.  Tamper Protection on endpoint(s) disabled.
Error in log is "2019-02-06 13:17:00.8447    ERROR CyveraService 25 
Cyvera.Client.Service.OneTimeActions.Actions.InstallUpdateAction 
Action    Signature validation failed for 
'C:\ProgramData\Cyvera\Everyone\Temp\Update_1681\815827dd-a27c-4335-9a96-7b5944df17cf' 
package. "

I checked the certs  now used to  verify the file Digicert EV Code 
Signing CA (SHA2).

These certs do not appear to be installed on Windows 10 by default?

Installed the digicert chain in local computer trusted CA root store and 
tried to push upgrade from ESM via an agent action with same fail result.

If I run the msi directly it installs fine.  Why is it failing signature 
validation if the certs are installed?

[efrancis]

@StPatrick 

what version are you upgrading from, and to?

[efrancis · Accepted solution]

@StPatrick 

https://docs.paloaltonetworks.com/traps/4-2/traps-endpoint-security-manager-new-features/upgradedown...

Depending on the versions, please refrence this note:

Traps 4.1.5-h1 is a hotfix release to support macOS 10.14 and does not contain any updates for Windows agents. To upgrade Windows agents to Traps 4.2.1, you must first upgrade the Traps agents to the non-hotfix release package ClientUpgradePackage-4.1.5.37365.zip (release date: 07/28/2018) or to the 4.2.0 release using the upgrade package ClientUpgradePackage-4.2.0.36348.zip (release date: 06/25/2018).

[StPatrick]

That's exactly it. Really appreciate the prompt repy efrancis

[efrancis]

Glad you got it working, post questions or concerns anytime!