Failed Update Install From Internal Update Server

Report · Feb 04, 2015

Hi,

I'm trying to setup an internal update server according to the instructions provided in the Flash Player Administration Guide but I'm having some trouble.

Here is the FlashInstall.log:

2015-2-4+19-12-14.562 [info] 1628 my.local.server

2015-2-4+19-12-14.612 [info] 1629 my.local.server

2015-2-4+19-12-14.615 [info] 1614

2015-2-4+19-12-14.617 [info] 1615

2015-2-4+19-12-14.619 [info] 1618

2015-2-4+19-12-14.621 [info] 1619 1063

2015-2-4+19-12-14.650 [info] 1628 my.local.server

2015-2-4+19-12-14.653 [info] 1629 my.local.server

2015-2-4+19-12-14.656 [info] 1614

2015-2-4+19-12-14.659 [info] 1615

2015-2-4+19-12-14.660 [info] 1618

2015-2-4+19-12-14.663 [info] 1604

2015-2-4+19-12-14.663 [info] 1608

2015-2-4+19-12-14.678 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml

2015-2-4+19-12-14.813 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/version.xml

2015-2-4+19-12-14.816 [info] 1632

2015-2-4+19-12-14.816 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml

2015-2-4+19-12-14.818 [warning] 1445

2015-2-4+19-12-14.818 [info] 1632

2015-2-4+19-12-14.819 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml

2015-2-4+19-12-14.820 [warning] 1445

2015-2-4+19-12-14.821 [info] 1632

2015-2-4+19-12-14.822 [info] 1600

2015-2-4+19-12-14.829 [error] 1217 -2146881269

2015-2-4+19-12-14.831 [error] 1234 183

2015-2-4+19-12-14.833 [info] 1612

2015-2-4+19-12-14.836 [info] 1620

Here is the Update Server directory tree:

\---pub

\---flashplayer

\---update

\---current

\---sau

| currentmajor.xml

| fp_background_update.log

| fp_background_update.bat

| fp_background_update.cab

|

+---11

| +---install

| | install_all_mac_pl_sgn.z

| | install_all_win_ax_sgn.z

| | install_all_win_pl_sgn.z

| |

| \---xml

| version.xml

|

+---15

| +---install

| | install_all_mac_pl_sgn.z

| | install_all_win_ax_sgn.z

| | install_all_win_pl_sgn.z

| |

| \---xml

| version.xml

|

\---16

+---install

| install_all_mac_pl_sgn.z

| install_all_win_ax_sgn.z

| install_all_win_pl_sgn.z

|

\---xml

version.xml

Here is the client mms.cfg:

AutoUpdateDisable=0

SilentAutoUpdateEnable=1

SilentAutoUpdateServerDomain=my.local.server

SilentAutoUpdateVerboseLogging=1

I have verified the computer trusts the SSL certificate and I can successfully browse the update site:

I have verified the cab file downloaded from Adobe by the server against a cab file I downloaded manually with my browser. Here is the md5sum output for each file:

73fc6ba78ab9660f63b1724f72e07a52 server-fp_background_update.cab

73fc6ba78ab9660f63b1724f72e07a52 browser-fp_background_update.cab

What would be causing the update process to fail? What else can I do to get this working? Am I missing something?

Thanks for your help.

Report · Feb 04, 2015

Hello,

What are the contents of the fp_background_update.log and fp_background_update.bat files? These files are not included in the fp_background_udpate.cab package.

--

Maria

Report · Feb 04, 2015

Those files are used by a task for getting the latest CAB file from Adobe.

fp_background_update.bat:

@ECHO OFF

SETLOCAL ENABLEEXTENSIONS

SET TITLE=fp_background_update

SET LOG=.\%TITLE%.log

SET SOURCE=http://download.macromedia.com/pub/flashplayer/current/licensing/win/fp_background_update.cab

SET DESTINATION=D:\AUSST\pub\flashplayer\update\current\sau

ECHO =O====== %date% %time% ======== >> %LOG% 2>&1

IF EXIST %DESTINATION% (

:: Skipping destination folder creation.

) ELSE (

:: Creating destination folder.

mkdir %DESTINATION% >> %LOG% 2>&1

)

:: Downloading files...

BITSADMIN /TRANSFER fp_background_update /DOWNLOAD /PRIORITY NORMAL %SOURCE% %DESTINATION%\fp_background_update.cab >> %LOG% 2>&1

:: Expanding CAB file...

expand %DESTINATION%\fp_background_update.cab -F:* %DESTINATION% >> %LOG% 2>&1

ECHO =X====== %date% %time% ======== >> %LOG% 2>&1

ECHO. >> %LOG% 2>&1

fp_background_update.log:

=O====== Wed 02/04/2015 11:00:05.97 ========

BITSADMIN version 3.0 [ 7.6.9200 ]

BITS administration utility.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.

Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

Transfer complete.

Microsoft (R) File Expansion Utility Version 6.2.9200.16384

Adding D:\AUSST\pub\flashplayer\update\current\sau\currentmajor.xml to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\11\install\install_all_mac_pl_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\11\install\install_all_win_pl_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\11\install\install_all_win_ax_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\11\xml\version.xml to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\15\install\install_all_mac_pl_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\15\install\install_all_win_pl_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\15\install\install_all_win_ax_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\15\xml\version.xml to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\16\install\install_all_mac_pl_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\16\install\install_all_win_pl_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\16\install\install_all_win_ax_sgn.z to Extraction Queue

Adding D:\AUSST\pub\flashplayer\update\current\sau\16\xml\version.xml to Extraction Queue

Expanding Files ....

Expanding Files Complete ...

13 files total.

=X====== Wed 02/04/2015 11:01:16.71 ========

Report · Feb 04, 2015

Can you please verify the MD5 hash values of the extracted files, in all 3 directories (/11, /15, & /16) are as follows:

install_all_mac_pl_sgn.z 8B5AA6F09B3A80FC454666466A285371

install_all_win_ax_sgn.z 159C663F58A11FC0C6B93BAA469AF3DA

install_all_win_pl_sgn.z 10C878FA8125C8CBD6FB1AC18A1AA2BD

--

Maria

Report · Feb 04, 2015

$ md5sum sau/*/install/install_all_*.z

8b5aa6f09b3a80fc454666466a285371 sau/11/install/install_all_mac_pl_sgn.z

159c663f58a11fc0c6b93baa469af3da sau/11/install/install_all_win_ax_sgn.z

10c878fa8125c8cbd6fb1ac18a1aa2bd sau/11/install/install_all_win_pl_sgn.z

8b5aa6f09b3a80fc454666466a285371 sau/15/install/install_all_mac_pl_sgn.z

159c663f58a11fc0c6b93baa469af3da sau/15/install/install_all_win_ax_sgn.z

10c878fa8125c8cbd6fb1ac18a1aa2bd sau/15/install/install_all_win_pl_sgn.z

8b5aa6f09b3a80fc454666466a285371 sau/16/install/install_all_mac_pl_sgn.z

159c663f58a11fc0c6b93baa469af3da sau/16/install/install_all_win_ax_sgn.z

10c878fa8125c8cbd6fb1ac18a1aa2bd sau/16/install/install_all_win_pl_sgn.z

Looks like they all match.

Report · Feb 04, 2015

Hi William,

Thank you for verifying the hash values. A few more questions: Do you have a proxy server configured? Is you SSL cert self-signed or issued by a CA?

--

Maria

Report · Feb 04, 2015

No proxy. SSL certificate is issued by our internal PKI ad is trusted by all computers and accounts. Here is the certificate as seen by the NT AUTHORITY\SYSTEM account:

Report · Feb 04, 2015

Thank you for providing the additional information. It's going to take a bit longer for me to investigate this. I hope to have more information by tomorrow.

--

Maria

Report · Feb 04, 2015

Ok, thank you.

I'm not sure if this will help but here are the relevant web server log entries that coincide with the latest update check:

u_ex150204.log:

2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/currentmajor.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 200 0 0 378 177 1

2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/16/xml/version.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 200 0 0 730 179 2

2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/16/xml/patch.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 404 0 2 202 177 3

2015-02-04 23:06:39 W3SVC2 my.local.server 10.17.3.102 GET /pub/flashplayer/update/current/sau/16/xml/patch.xml - 443 - 10.228.4.34 HTTP/1.1 Get+Flash+Player+version+xml/1.0 - - my.local.server 404 0 64 0 177 18

FlashInstall.log:

2015-2-4+23-6-39.722 [info] 1628 my.local.server

2015-2-4+23-6-39.724 [info] 1629 my.local.server

2015-2-4+23-6-39.726 [info] 1614

2015-2-4+23-6-39.728 [info] 1615

2015-2-4+23-6-39.729 [info] 1618

2015-2-4+23-6-39.731 [info] 1619 1063

2015-2-4+23-6-39.757 [info] 1628 my.local.server

2015-2-4+23-6-39.759 [info] 1629 my.local.server

2015-2-4+23-6-39.761 [info] 1614

2015-2-4+23-6-39.762 [info] 1615

2015-2-4+23-6-39.763 [info] 1618

2015-2-4+23-6-39.765 [info] 1604

2015-2-4+23-6-39.765 [info] 1608

2015-2-4+23-6-39.772 [info] 1631 /pub/flashplayer/update/current/sau/currentmajor.xml

2015-2-4+23-6-39.840 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/version.xml

2015-2-4+23-6-39.842 [info] 1632

2015-2-4+23-6-39.843 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml

2015-2-4+23-6-39.845 [warning] 1445

2015-2-4+23-6-39.845 [info] 1632

2015-2-4+23-6-39.846 [info] 1630 /pub/flashplayer/update/current/sau/16/xml/patch.xml

2015-2-4+23-6-39.848 [warning] 1445

2015-2-4+23-6-39.848 [info] 1632

2015-2-4+23-6-39.849 [info] 1600

2015-2-4+23-6-39.856 [error] 1217 -2146881269

2015-2-4+23-6-39.856 [error] 1234 183

2015-2-4+23-6-39.857 [info] 1612

2015-2-4+23-6-39.859 [info] 1620

Report · Feb 05, 2015

Anything yet? I'd really like to get my network updated with the new version. I checked the FlashInstall.log and it's still got the same output (repeated every hour):

2015-2-5+20-35-0.122 [info] 1628 my.local.server

2015-2-5+20-35-0.347 [info] 1629 my.local.server

2015-2-5+20-35-0.401 [info] 1614

2015-2-5+20-35-0.404 [info] 1615

2015-2-5+20-35-0.407 [info] 1618

2015-2-5+20-35-0.408 [info] 1619 1063

2015-2-5+20-35-0.440 [info] 1628 my.local.server

2015-2-5+20-35-0.443 [info] 1629 my.local.server

2015-2-5+20-35-0.447 [info] 1614

2015-2-5+20-35-0.449 [info] 1615

2015-2-5+20-35-0.450 [info] 1618

2015-2-5+20-35-0.452 [info] 1604

2015-2-5+20-35-0.452 [info] 1608

2015-2-5+20-35-0.453 [info] 1612

2015-2-5+20-35-0.454 [info] 1620

Report · Feb 05, 2015

Hi William,

I apologize for not responding sooner. I was hoping to get back to you earlier today, however, we actually had a Flash Player release today and I've been busy with tasks relating to that. I'm still investigating your scenario (the main error is that the ActiveX installer signature validation failed, but this seems suspect as it's not being widely reported), however, you may want to download the latest fp_background_update.cab file (containing version 16.0.0.305) and giving that a try.

--

Maria

Report · Feb 05, 2015

The latest cab has already been downloaded by the update server. Still no joy.

BTW, where is the FlashInstall.log located on OS X? I have some Mac clients as well and I'd like to check on their status.

Report · Feb 05, 2015

Hi William,

Unfortunately, I'm not able to reproduce the error you are observing, but will continue to investigate. Using a network sniffing utility (such as Wireshark or similar), can you check to see if the installer file is actually being downloaded from the internal server to the machine?

On Mac, the file is FlashPlayerInstallManager.log located in ~/Library/Logs. Log sessions have begin with ---- log start ---- and end with --- log end ----. Some items also log to /private/var/log/install.log file, but there's no easy way to detect the beginning and ending of a log session in this file. To ensure I capture the logs for a given test session, I view both files in the Console app, and insert a marker in the file before I begin testing. This ensures I capture all the logs for a given install and don't miss something.

--

Maria

Report · Feb 05, 2015

The information you gave about the signature not being verified and suggestion of using Wireshark to investigate led me to a resolution. I didn't have port 80 configured correctly for the host header I'm using. Once I got that sorted things started working. Thanks so much for your help.

Report · Feb 06, 2015

Can you please describe the details needed to fix the bug.

I have the same problems and don't know how to resolve them.

Thanks.

Report · Feb 06, 2015

Sure, but I'm not sure it will help.

My issue was with how IIS was configured. I hadn't created the port 80 binding with a proper host header so the update service was only able to connect to the update site on port 443. Once I added the correct host header/port binding on 80 everything started working.

Report · Feb 06, 2015

Hi William,

I'm glad that you were able to resolve the issue.

--

Maria

Adobe Community

Failed Update Install From Internal Update Server

1 Correct answer