Symptoms

Certificate errors are returned when submitting login information to ProtectCloud.shavlik.com from Shavlik Patch Configuration

Error Details Contain the error:

A certificate chain could not be built to a trusted root authority

Cause

http://gtssl-aia.geotrust.com is needed to verify/validate credentials from SCCM.

Resolution

If a Proxy is used to access the internet, the following certificate authority sites need to be included for Shavlik Patch to work properly.

List of certificate sites to add to proxy list to allow Shavlik Patch Plugin Functionality:

http://gtssl-crl.geotrust.com

http://gtssl-ocsp.geotrust.com

http://crl.geotrust.com

http://ocsp.geotrust.com

http://csc3-2010-crl.verisign.com

http://ocsp.verisign.com

http://crl.verisign.com

http://csc3-2010-aia.verisign.com

http://*.symcb.com/

Affected Product(s)

Shavlik Patch for Microsoft System Center (Plugin)