While Upgrading the orion Platform from 2020.2.5 to 2020.2.6 having problem

https://thwack.solarwinds.com/resources/b/geek-speak/posts/troubleshooting-software-upgrade-code-signing-certificate-errors-1959659958

Please check if this will help you.

https://thwack.solarwinds.com/resources/b/geek-speak/posts/troubleshooting-software-upgrade-code-signing-certificate-errors-1959659958

Please check if this will help you.

Thanks for your response. we tried with this only still having the same issue. 

Please open a support case so we can troubleshoot this issue further. The solution may be as simple as uninstalling and re-installing. 

Hi,

Yes, we opened case with vendor and they suggested test one server  would it be possible to run the configuration wizard  Please select website and create a new self signed certificate, and then run the upgrade.
But unfortunately we don't have test environment. already responded to him. waiting for vendor update.  

The issue is that the content.psd file that is part of Orion is digitally signed and has a certificate that has either been revoked (old version of file that was not replaced when upgrading) or that you are still missing the root or intermediary certificates on that machines certificate store. 

You can confirm the issue by opening the file right-click Properties, "Digital Signatures" tab, "View Certificate" button, and the "Certification Path" tab – in correct environments, there are 3 levels of trust, ending with the "SolarWinds Worldwide, LLC", signed by "DigiCert SHA2 Assured ID Code Signing CA" , which in turn should be signed by the aforementioned trust root, with simple display name "DigiCert".

If there are less than 3 items in the Certification Path, and/or any of them is shown as untrusted, then your Windows environment is affected by the missing certificate trust root issue, and you have to re/install the trusted root certificate manually.

It can be found directly on the DigiCert website, as cacerts.digicert.com/DigiCertAssuredIDRootCA.crt and you need to install it into Local Machine "Root" (Trusted Root Certification Authorities) and "AuthRoot" (Third-Party Root Certification Authorities).

Installing the certificate to both stores at the same time helps to alleviate another rarely encountered issue where Windows Update can remove manually added root certificates.

For example of the issue affecting another product/company, you can see the issue explained by TrendMicro, with detailed mitigation steps here: success.trendmicro.com/.../1099410-resolving-certificate-related-issues-in-officescan-apex-one (note that for SolarWinds products, only the first mentioned missing certificate is actually relevant).

Thanks for update. we checked the file and go to properties it is showing the digital signature infromation  certificate not installed. 

and we checked the path also certificate not installed. due this reason i am unable to do the upgrade. Please confirm. 



Thank you. 

Correct. This certificate issue is the reason why the Configuration Wizard is failing. 

Configuration wizard not failed. 10 days ago we did the configuration wizard for website. on that time configuration wizard was ran  successfully without issues. shall we follow the upgrdation process like this 

> install this certificate.
> run the binary file.  
> after that run the configuration wizard  

please advise. 

Apologies, I meant installer. Note that this issue is documented in the following KB article. The easiest way to resolve the issue if to apply all available Windows Updates to the Orion server prior to running the installer. 

https://support.solarwinds.com/SuccessCenter/s/article/My-Orion-Deployment-won-t-push-out-2020-2-Hotfix1-unless-you?language=en_US