Symptom
You receive the following error when attempting to verify the Account settings in Shavlik Patch: ID4257: x.509 certificate 'CN=*.shavlik.com......validation failed by the token holder
Cause
Shavlik Patch is not able to validate the certificates.
Solution
Add these URLs to your firewall access list
http://gtssl-ocsp.geotrust.com
http://csc3-2010-crl.verisign.com
http://csc3-2010-aia.verisign.com
Affected Products
Shavlik Patch for Microsoft System Center (SCUPdates)