Clients Unable to update - "Cached cookie has expired or new PID is available"

Issue  -  Recently we started witnessing  that one of the site clients (specifically servers) were unable to install updates. the Client is unable to communicate to the WSUS Server. nothing shows in software Center. It gives soap, cookie, and sync errors. We're currently using SCCM 2012 R2

 Error -  windowsupdate.log:
2011-10-27 00:11:06:391  808 9b8 PT WARNING: Cached cookie has expired or new PID is i
2011-10-27 00:11:06:391  808 9b8 PT Initializing simple targeting cookie, clientId = , target group = 000-IB Produkcija, DNS name =
2011-10-27 00:11:06:391  808 9b8 PT   Server URL = http://wsus-zga/SimpleAuthWebService/SimpleAuth.asmx
2011-10-27 00:11:06:485  808 9b8 PT WARNING: GetAuthorizationCookie failure, error = 0x8024400E, soap client error = 7, soap error code = 400, HTTP status code = 200
2011-10-27 00:11:06:485  808 9b8 PT WARNING: SOAP Fault: 0x000190
2011-10-27 00:11:06:485  808 9b8 PT WARNING:     faultstring:Fault occurred
2011-10-27 00:11:06:485  808 9b8 PT WARNING:     ErrorCode:InternalServerError(5)
2011-10-27 00:11:06:485  808 9b8 PT WARNING:     Message:(null)
2011-10-27 00:11:06:485  808 9b8 PT WARNING:     Method:"http://www.microsoft.com/SoftwareDistribution/Server/SimpleAuthWebService/GetAuthorizationCookie"
2011-10-27 00:11:06:485  808 9b8 PT WARNING:     ID:383826f6-bd49-42dd-a9cd-dbcc065f8b33
2011-10-27 00:11:06:485  808 9b8 PT WARNING: Failed to initialize Simple Targeting Cookie: 0x8024400e

Tried  -  wuauclt.exe /resetauthorization /detectnow , didn't work

Resolution -  On one of the machine , i tried following steps:
START --> RUN --> CMD <RETURN>

REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientId /f
REG DELETE "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate" /v SusClientIdValidation /f
net stop "Automatic Updates"
move %windir%\windowsupdate.log %windir%\windowsupdate.old.log
move %windir%\SoftwareDistribution %windir%\SoftwareDistributionold
regsvr32 /s atl.dll
regsvr32 /s wucltui.dll
regsvr32 /s wups.dll
regsvr32 /s wuaueng.dll
regsvr32 /s wuapi.dll
regsvr32 /s msxml3.dll
regsvr32 /s mssip32.dll
regsvr32 /s initpki.dll
regsvr32 /s softpub.dll
net start "Automatic Updates"
wuauclt /resetauthorization /detectnow

Leave it around 10 minutes and the shield should appear
and It did work.
Also i tried couple of steps and it did work.
move %windir%\windowsupdate.log %windir%\windowsupdate.old.log
move %windir%\SoftwareDistribution %windir%\SoftwareDistributionold

Refrence  - http://www.wsus.info/index.php?showtopic=13828

Comments

Post a Comment

Popular posts from this blog

Java Control Panel Icon "Application Not Found"

Image
Howto: Fix the "Application not found" error in the Java Control Panel icon. These same steps may be useful for other malfunctioning Windows Control Panel icons. In Windows 7, the Java Control Panel icon may be damaged / corrupted. Attempting to launch the icon results in "Explorer.exe : Application not found". Note the generic icon: When working properly, the circled icon should look like this: This problem appears to be an artifact from previous JRE installations and Sun's installation routines were flawed. Re-installing JRE (the Java Runtime Environment) does not resolve the problem. Immediate workaround: If needed, the Java Control Panel can be manually launched using this location: C:\Program Files (x86)\Java\JRE6\bin\Javacpl.exe As a side note, when launching, other-mouse-click the .exe and choose "Run as Administrator".  Running as Administrator resolves a bug where changes in the Control Panel (especially Auto-update changes) do not stic
Read more

Enterprise CA option is greyed out / unavailable

Image
Many times, when installing Active Directory Certificate Services they cannot choose to install Enterprise Certification Authority, because it’s unavailable as in following picture: Well, you need to fulfill basic requirements: Server machine has to be a member server (domain joined). You can run an Enterprise CA on the Standard, Enterprise, or Data Center Windows Edition. The difference is the number of ADCS features and components that can be enabled. To get full functionality, you need to run on Enterprise or Data Center Windows Server 2008 /12/R2/ Editions.  In order to install an Enterprise CA, you must be a member of either Enterprise Admins or Domain Admins in the forest root domain (either directly or through a group nesting). If issue still persists, there is probably a problem with getting correct credentials of your account. There are many thing that can cause it (network blockage, domain settings, server configuration, and other issues). In all ca
Read more

Unable to connect to Wireless profile being pushed using GPO

Image
Today , some laptop users started reporting as they are unable to connect to ‘Wireless profile’ after SCEP installation has taken place. I found, most of the laptop users were having this issue. I immediately uninstalled SCEP but that didn’t help , tried removing Wi-Fi profiles under the path ‘C :\ProgramData\Microsoft\Wlansvc\Profiles\Interfaces\ Interface’ but that didn’t help too. Error - When checking event viewer, the only error that showed up is as follows 5 times in a row.          “Error skipping EAP method DLL path name validation failed. Error: typeId=25, authorId=0,vendorId=0,vendorType=0”, This error indicates a registry or missing corrupt file issue. ‘ EAPHost is a Microsoft Windows Networking component that provides an Extensible Authentication Protocol (EAP) infrastructure for the authentication of following protocols such as   802.1X   and   Point-to-Point (PPP). Cause - Symantec didn’t uninstall properly caused this issue. Resolution – After chec
Read more