Re-Signing Packages

After changing or updating the signing certificate you're using on your WSUS Server, you can no longer deploy bundles that contain packages signed by the previous certificate. You'll need to re-sign the packages using your new certificate. Follow the instructions to view and re-sign packages.
Important: Do not re-sign packages while publishing or synchronizing content, as this action may cause re-signs (or the conflicting process) to fail. Take the following actions to ensure this conflict does not occur:
  • Do not publish any content while the re-sign is in process.
  • Review your synchronization schedule to makes sure no sync is scheduled during the re-sign. Modify your schedule if necessary, For more information, see Updating the Synchronization Schedule.
  1. From the Workspace (the lower panel on the left), make sure that Administration is selected.
  2. From the Administration tree, select HEAT PatchLink DeskTop for System Center > Settings.
  3. From the WSUS Signing Certificate Information section, click Re-sign Packages.
    Step Result: The Re-sign Packages dialog opens.

  4. Use the filters to display packages meeting specific state, vendor, product, or title criteria.
  5. Select the packages you want to re-sign.
    1. In the first column, click the arrow next to a bundle to view individual packages within that bundle.
    2. Select the checkboxes for the packages you want to re-sign, or select the checkbox for an entire bundle.


    Note:
    • You can only re-sign packages with a State of Ready.
    • The Sign Selected button is unavailable while synchronization is active.
  6. Click the Sign Selected button.
    Step Result: The Confirm Re-sign dialog displays the number of packages you've selected.
    Note: The more packages you've selected, the longer the re-signing process takes to complete. You won't be able to publish or synchronize until re-signing completes.
  7. Click Re-sign to confirm your package selection and begin the re-sign process.
Result: Re-signing begins.
After Completing This Task:
After re-signing completes successfully, you'll need to re-publish the packages before you can deploy them again. Complete Publish Software.