HP ThinPro updates/installs "Signature Block Verification Failed: Certificate Verify Error"

[apaloka]

Thin Client T550, brand new out the box.

ThinPro OS 8.1 SP7

Installing any updates from the Easy Update or HPDM we get the same error.

"Xarverify:

Signature Block Verification Failed: Certificate Verify Error (Verify Error: Certificate has expired)

Fatal Error: Xar file could not be verified!"

This happens with all apps - Omnissa, Zoom, AVD, Citrix

This happens from HPDM as well.

[DGroves]

Hmmm, i do know that the windows OS had a recent issue with secure boot certs that were expiring just recently and microsoft put out a patch to update the certificates 

you might be having the same issue and you should be able to test this by setting the thin clients clock back one year and not letting it connect to the internet during the OS install

[DXft21]

Have the same problem. And update all (2000+) without connect to internet - strange thing…

Nice to see any official information from HP.

[DGroves]

the HP T550 is a current model that has current HP support for win 10 IOT, HP thin Client OS and two more that i don't recall at the moment

you can also get the Cert error if you main system that pushes out the OS to the clients  is not configured correctly unfortunately i don't work with  this software/hardware except for very limited cases so i'm not going to be much help and i also don't know how your network is configured

perhaps this may give some help

https://mdcs.nl/knowledge/howto-import-certificates-in-thinpro-using-hp-device-manager/

[DXft21]

I’m flash client from Easy Update. Image download from HP directly. I’m test on 7.2,7.3,8.0,8.1 - all version don’t install official packages (workspace, service packs and etc)

And update certificates don’t  solve problem)

[DGroves]

again, there is most likely a software misconfiguration on the system using easy update

if you are out of HP warranty you only realistic options 

are to have/pay a 3rd party specialist look at your issue or hire a tech who is certified

[apaloka]

as you can see in the above replies this is likely a problem on HP side with possibly a bad certificate check
this is happening on multiple versions of thin clients and device managers and apps

only the ones deployed from the thin update or HP update center

[DXft21]

Check certificates in system store, one expire in July 2025. If I reverse time to 16.07 - all packages install correct. 
Install latest CA drivers from Debian repository - don’t solve problem. Problem in certificate used for sign HP packages)

[apaloka]

Do you know which cert?

[Dugg901]

I too would like to know what cert you changed the the time on. My company is having the same issue with all HP Xar files.