ConfigMgr 2007 狀態: Patch Management 同步處理元件不信任下載的內容

SMSv4_Status__Patch_Management_synchronization_component_can_not_trust_the_downloaded_content_1_Rule (Rule)

Knowledge Base article:

摘要

已對更新 .cab 檔案及所有由網際網路下載之更新內容的簽章進行驗證。此驗證會確認下載的內容來自受信任的來源。如果產生此警示，表示簽章檢查驗證可能失敗。

原因

發生這個狀況的原因可能是 .cab 檔案或更新的二進位是從不正確的位置下載，或下載的內容在從 Microsoft 提供的位置下載後已經遭到修改。

Element properties:

Target	Microsoft.SystemCenter.ConfigurationManager.2007.Microsoft_SMSv4_Site_Database_Servers_Installation
Category	EventCollection
Enabled	True
Alert Generate	True
Alert Severity	Error
Alert Priority	Low
Remotable	True
Alert Message	SMSv4_Status__Patch_Management_synchronization_component_can_not_trust_the_downloaded_content_1_Rule.AllertMessageBackwardCompatibility
Comment	Mom2005ID='{C72A719B-34E5-4A5B-BA62-B5153328B915}';MOM2005ComputerGroupID={15348338-2E39-4B34-9DFF-4719AE7F1CCE}

Member Modules:

ID	Module Type	TypeId	RunAs
_F320DA51_13BF_11D3_B2CD_00A0C92A28B4_	DataSource	System.Mom.BackwardCompatibility.FilteredEvent.DataProvider	Default
GenerateAlert	WriteAction	System.Mom.BackwardCompatibility.AlertResponse	Default

Source Code:

<Rule ID="SMSv4_Status__Patch_Management_synchronization_component_can_not_trust_the_downloaded_content_1_Rule" Target="Microsoft.SystemCenter.ConfigurationManager.2007.Microsoft_SMSv4_Site_Database_Servers_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{C72A719B-34E5-4A5B-BA62-B5153328B915}';MOM2005ComputerGroupID={15348338-2E39-4B34-9DFF-4719AE7F1CCE}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F320DA51_13BF_11D3_B2CD_00A0C92A28B4_" Comment="{F320DA51-13BF-11D3-B2CD-00A0C92A28B4}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.FilteredEvent.DataProvider">

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>11461</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>ConfigMgr 2007 Monitor SMS Status Messages</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/Params/Param[1]$

           - ConfigMgr 2007 Status: Patch Management synchronization component can not trust the downloaded content.





            $Data/EventDescription$

          



The status message contains message properties



Machine Name: 

            $Data/Params/Param[1]$

          

Module Name: 

            $Data/Params/Param[2]$

          

Component: 

            $Data/Params/Param[3]$

          

Message ID: 

            $Data/Params/Param[4]$

          

Win32 Error: 

            $Data/Params/Param[5]$

          

Top Level Site Code: 

            $Data/Params/Param[6]$

          

Database Record ID: 

            $Data/Params/Param[7]$

          </Description>

        <AlertLevel>40</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>ConfigMgr 2007 Status: Patch Management synchronization component can not trust the downloaded content</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

  </WriteActions>

</Rule>