Patchlink Replication Failure: Error 12057

  • Document ID:3932342
  • Creation Date:05-Oct-2006
  • Modified Date:16-Mar-2012

Environment

Novell ZENworks Patch Management - Powered by PatchLink
This article describes a known issue regarding the installation of a ZENworks Patch Managment Update Server (PLUS) on Windows Server 2003 Service Pack 1 (SP1). In this environment, the connection that permits the Patchlink Update Agent to communicate with the Novell Subscription Server is not properly registered.
In order to ensure proper registration of PLUS and PLUS components, Novell recommends that the ZPM Server be installedprior toupgrading Windows Server 2003 to Service Pack 1. This ensures that PLUS has registered and replicated with the Novell Subscription Server.

Situation

Failed Replication and Error 12057 on Windows 2003 Server
Packages do not download
PLUS > Options > Subscription page indicates failed Licenses and Vulnerabilities replications
Error 12057 from source WSH appears in Windows Event Viewer
Successful replecation and patch deployment

Resolution

The recommended solution is to allow Internet access to the CRL on the Verisign Web site at http://SVRSecure-crl.verisign.com/SVRSecure2005.crl. Verisign is the Certificate Authority that issued PatchLink's/Novell's SSL certificate.

If your IT group is not willing to allow Internet access to the Verisign site, you must install the certificate locally, as follows:

  1. From a computer with Internet access, download the PatchLink SSL certificate.

  2. Transfer the file to the computer(s) requiring the certificate.

  3. Right-click on the file and select Install CRL.

  4. On the second screen of the Certificate Import Wizard, select Place all certificates in the following store.

5. Click Browse.

6. Place a checkmark next to Show physical stores.

7. Expand the Trusted Root Certification Authorities certificate store and selectLocal Computer

8. Click OK.

9. In the Certificate Import Wizard, clickNext.

10. Click Finish

11. Click OK in the final dialog box.

12. Go to Options > Subscription on the PLUS administrative console and clickUpdate Now.

Licenses, Vulnerabilities, and Packages replications should all complete successfully.

Additional Information

During SSL communication, which PLUS uses to connect with the Novell Subscription Server, Windows 2003 Server Service Pack 1 requires the computer to access the certificate revocation list (CRL) for the company that issued the SSL certificate (in order to verify that the certificate is still valid). The CRL must be accessed via the Internet if is not installed locally and some companies may have network settings which restrict Internet access. If the server cannot access the CRL, the certificate is not accepted and the stated symptoms appear.

Formerly known as TID# 10099287