Symptom

You receive the following error when attempting to verify the Account settings in Shavlik Patch:  ID4257: x.509 certificate 'CN=*.shavlik.com......validation failed by the token holder

Cause

Shavlik Patch is not able to validate the certificates.

Solution

1. Ensure you are running the latest version of Shavlik Patch, at least version 2.1.810. There was a critical certificate change in this update and is required.

2. Add the following URLs to your firewall access list

http://gtssl-crl.geotrust.com

http://gtssl-ocsp.geotrust.com

http://crl.geotrust.com

http://ocsp.geotrust.com

http://csc3-2010-crl.verisign.com

http://ocsp.verisign.com

http://crl.verisign.com

http://csc3-2010-aia.verisign.com

http://*.symcb.com

Affected Product(s)

Shavlik Patch for Microsoft System Center (SCUPdates)