Unable to install or update agent binaries in Shavlik Protect (2014715)

Symptoms

• Cannot install or update agent binaries in Shavlik Protect
• Installing or updating Protect agent binaries fails 
• The agent interface installs, but the the scanning engines, such as patch, threat, and asset engines, are missing 
• The STAgentUpdater.log file returns entries similar to:
  
  2012-02-20T16:03:43.9185682Z 0790 W SingleFileDownload.cpp:340 Signature check failed - C:\ProgramData\Shavlik Technologies\Agent Data\protect.manifest.cab
  
  2012-02-20T16:03:43.9653700Z 0790 E STAgentUpdater.cpp:629 Update failed with error: class STCore::CInvalidOperationException at XmlDomManagement.cpp:356: Error loading XML document from 'C:\ProgramData\Shavlik Technologies\Agent Data\Protect.manifest.xml': The system cannot locate the object specified.

Cause

This issue occurs if there are problems when verifying the signature for agent definitions.  

Resolution

To resolve this issue the root certificates of the client (agent) machine must be updated. You can apply the updates using Protect using the following instructions:

1. Create a custom patch scan template that includes the patch type filter Security Tools. 
2. Run a scan on the target machine and then look for the bulletins MSRC-001 or MSRC-002.
   
   MSRC-001 is for Windows XP and 2003. For newer operating systems, such as Vista, 2008, and Windows 7, the root certificates are automatically updated if the machine is connected to the Internet. However, if you have to apply the update manually, you should be able to deploy MSRC-002 from Shavlik Protect.

Additional Information

For more information on the Microsoft root certificate program, see the Microsoft Knowledge Base article 931125.

Products

Shavlik NetChk Protect

VMware vCenter Protect Standard

Shavlik Protect