Page 1 of 1

Signature verification failed for waptdeploy.exe

Published: October 28, 2025 - 11:21
by AGUTI
Hello,
We have an older Windows 7 environment on which we are unable to deploy the WAPT agent using our GPO (which works on newer machines). The error is clearly:
"Unable to check digital signature of executable C:\users\...\AppData\Local\Temp\waptagent.exe".
With an "Exception $0040210C $00405702".

We suspected a problem with the client's SSL/TLS layer version (the schannel under Win7 uses SSL 2, but not TLS), but simply enabling TLS 1.2 in the registry doesn't solve the problem...

Our WAPT is version 2.4.0.14080.

What have we missed? Or is Win7 too outdated for WAPT?

Thank you for your answers.

Re: Failed to verify waptdeploy.exe signature

Published: October 28, 2025 - 12:52 PM
by htouvet
Good morning,
In version 2.4, waptdeploy verified the Authenticode signature of the waptagent.exe executable, confirming that the executable's signer was indeed Tranquil IT
But this poses problems with machines not connected to the internet, or whose CAs are not up to date.
In subsequent versions, we disabled this by default. (We already check integrity using the hash.)

You can add the following to the GPO command line:

Code: Select all

--disablechecksignature=1