Page 1 of 1

[SOLVED] WADS Error - Self Signed Certificate

Published: May 31, 2023 - 4:49 PM
by Mathis
[WAPT INFO]
OS: Windows
WAPT Version: 2.4.0.14031
Enterprise Edition

Hello,

we are experiencing a WADS error, as shown in the attached image.

We have migrated our enterprise solution to a new Windows VM.
We already encountered this bug in version 2.3; the rest of the deployment is working correctly.
in the deployment command parameters,
`verify_cert=0`
but this does not resolve the issue.

Thank you in advance.

Best regards,
Mathis.

Re: WADS error - Self Signed Certificate

Published: May 31, 2023 - 5:26 PM
by sfonteneau
The configuration signature appears to be invalid

since version 2.4. A button in the right-click menu allows you to verify the machine configuration signature in WADs.

To re-sign, stop the deployment and then restart it.

Another possible issue is that timing is important in signature verification, so the time setting in the BIOS may have an impact.

Re: WADS error - Self Signed Certificate

Published: June 1, 2023 - 9:55 AM
by Mathis
If I check the configuration signature, I get this display:
Wapt_CertNo.png
Wapt_CertNo.png (34.93 KB) Viewed 3287 times
And if I sign the packages, start and stop the deployment, I get this display when checking the configuration signature:
Wapt_Cert.png
Wapt_Cert.png (9.81 KB) Viewed 3287 times
Despite this, I still get the same error during the "Self Signed Certificate" deployment

Re: WADS error - Self Signed Certificate

Published: June 1, 2023 - 10:55 AM
by sfonteneau
Two possible scenarios to check:

The WinPE file doesn't include the key that signed the WADs system (when you generate the WinPE file, you see a list of recognized certificates). You can regenerate a WinPE file, making sure that your certificate is included.

Also check:

Is the BIOS clock correct?

Re: WADS error - Self Signed Certificate

Published: June 2, 2023 - 2:21 PM
by Mathis
Hello,

to resolve the issue, we generated a new certificate separate from the old one. To ensure the hosts had this new certificate, we deployed it via Group Policy, thus discontinuing the use of the old one.

Since then, there have been no problems; the new certificate works perfectly with WADS.

The issue likely stemmed from the certificate itself; when viewing its details, it displayed an error: "The integrity of this certificate cannot be guaranteed. The certificate may have been damaged or altered."