Reference: Common errors
Review common Patch error messages and possible solutions. For information about general errors in Patch, see Troubleshooting Patch.
Client API connection failed. Unable to download file. Error #9
An endpoint performed a client reset while downloading a patch.
This error message can typically be ignored. After the client reset is complete, the endpoint typically continues downloading the patch within minutes. If you continue to see this error message, Contact Tanium Support.
Error creating Update Service Object - See C:\Windows\windowsupdate.log for more details. Error #9
Patch is unable to establish communication with the local Windows Update API.
Review the Windows Update log for errors, and then consult the Microsoft documentation for information about each error.
Patch <Patch UID>: WU_E_DM_INCORRECTFILEHASH. Error #-2145099774
A patch file becomes corrupted in transit from Microsoft to the Tanium Server.
For help with this error message, Contact Tanium Support.
Patch <Patch UID>: ERROR_INSTALL_FAILURE. Error #-2147023293
This error can have various causes, but it is likely caused either by a third-party application or by corruption in the Windows update.
- Review your Host and network security requirements and make sure you have added the necessary security exclusions so that antivirus software is not blocking Tanium processes.
- Use Tanium to target the endpoint and deploy the Patch - Reset Windows Update Client package to perform a Windows Update Agent reset. To obtain this package, Contact Tanium Support.
Patch <Patch UID>: WU_E_CALL_CANCELLED. Error #-2145124341
This error is likely caused by interference from anti-virus software on an endpoint.
Review your Host and network security requirements and make sure you have added the necessary security exclusions so that antivirus software is not blocking Tanium processes.
The installation drive on an endpoint is full.
Check the system drive and the drive on which the Tanium Client is installed and provide more disk space. Use the Disk Free Space, System Disk Free Space, Low Disk Space, or Low System Disk Free Space Tanium sensors to identify systems with low amounts of free disk space.
OfflSnc WARNING: failed to copy offline cab. hr = 0x80070070
The drive that contains the Tanium Client does not have enough disk space to download the offline CAB file.
Increase the amount of space available on the drive. Use the Disk Free Space, System Disk Free Space, Low Disk Space, or Low System Disk Free Space Tanium sensors to identify systems with low amounts of free disk space.
The patch cannot be installed silently, and a user must sign in and interact with the installation. Typically, this error occurs when conducting server patching.
Add the update to a block list or remove it from your deployment patch list. For more information, see Exclude patches with block lists and Edit a list.
This error is triggered by the Windows Update Agent, and usually indicates that the endpoint needs to be restarted.
- Use the Uptime sensor to verify the uptime of the endpoint. For more information, see Tanium Console User Guide: Managing Sensors.
- If the endpoint was configured to reboot but did not reboot after receiving a patch, this error is the result of conflicting files running on the endpoint. Verify that End-User Notifications and reboot settings are properly configured for the endpoint. For more information, see Install and Configure Tanium End-User NotificationsConfigure Tanium End-User Notifications.
- Restart the endpoint and reissue the deployment. For more information, see Reissue a deployment.
Unable to Load PatchLib
This error is likely caused either by an endpoint not being part of a Patch action group, or by an incorrect version of Patch on the endpoint.
- Verify that the affected endpoint is in the Patch action group so that it is within scope of operations. For more information, see Configuring Patch.
- Verify that asking Get Endpoint Configuration – Tools Status contains Patch in Interact shows the correct version of Patch is installed.
Windows Update Error: -2145124338 WU_E_XML_INVALID
The Windows Update Agent found invalid information in the XML data for the update.
Make sure that the endpoint is using the latest version of Windows Update Agent.
Unrestored registry snapshot found
The Patch Manager process was interrupted during a scan. This issue can happen if the endpoint restarts during a scan.
This issue is usually transient and no longer appears after the next scheduled scan. If you continue to see this error message, Contact Tanium Support.
Windows Update Manager timed out waiting for the Windows Update Service to reach a Stopped state
Tanium attempted to restart the Windows Update service prior to executing a Tanium Scan for Windows scan. This attempt timed out if the Windows Update service was busy performing an operation (likely unrelated to Tanium Patch) at the time Tanium attempted to restart the service.
- Check the following Windows Update Agent logs to determine what invoked the operation (for example, automatic updates scan or WSUS):
- Use the Patch - Reset Windows Update Client package to reset Windows Update Agent. To obtain this package, Contact Tanium Support.
Windows Update Error: -2145107951 WU_E_PT_SUS_SERVER_NOT_SET
Either the endpoint is running Windows 10 Home Edition, or else the registry value is not set for a WSUS scan.
- Windows 10 Home Edition does not support Tanium Scan or WSUS scan. Contact Tanium Support if you see this error in your environment.
- Use the Registry Value Data Tanium sensor to identify the value set for WUServer on the endpoint. WSUS scans require the registry value HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\WUServerWUServer. If that value does not exist on the endpoint, use the Registry - Set Value Tanium Package to set the value. For more information, see Tanium Console User Guide: Managing packages.
Windows Group Policies overwrites this registry change if a Group Policy object specifies an intranet server to host updates from Microsoft Update. For more information, see Microsoft Documentation: Configure Group Policy settings for automatic updates.
Linux: Could not get results
This error is likely caused by Patch tools not being installed on endpoints.
Verify that the Patch tools are installed on your Linux endpoints.
- On the Patch Overview page, click Settings and then click Operating Systems to verify that the Enhanced Linux Support option is enabled.
- Verify that the Patch tools are installed on your Linux endpoints.
If the Patch tools are not installed on your Linux endpoints, the Endpoint Configuration - Tools Status sensor returns
Not Installed for Patch.
Linux: Failed to download repomd.xml
The Tanium server is unable to reach the repomd.xml file from the repository.
Check for the following issues:
- For Red Hat systems, the Red Hat or Satellite certificate has been improperly configured, the subscription has been detached from the certificate, or the subscription has expired. For more information, see (Red Hat endpoints) Configure Tanium Server to use certificate authentication(Red Hat endpoints) Configure Tanium Cloud to use certificate authentication.
- The repository has been decommissioned by the vendor (example: CentOS 6).
- A firewall or proxy is interfering with communication between the Tanium server and the remote repository.
Linux: Repo URLs found but unable to snapshot metadata files, likely due to connectivity issue
This error indicates that the Tanium Server cannot access the source repository for download.
- Ensure that the Tanium Server can access the repository upstream URL.
- For Red Hat Enterprise Linux repositories, ensure that you have properly configured the Red Hat certificate. For more information, see (Red Hat endpoints) Configure Tanium Server to use certificate authentication.
- If the problem persists, Contact Tanium Support for assistance. Provide logs from the time period during which the problem occurred. For more information, see Collect a troubleshooting package.
- For Red Hat Enterprise Linux repositories, ensure that the Red Hat certificate was properly configured. For more information, see (Red Hat endpoints) Configure Tanium Cloud to use certificate authentication.
- Contact Tanium Support to ensure that the Tanium Server can access the repository upstream URL.
Linux: Selected repo <repository_name> is missing required Yum variables
This error indicates that Patch could not gather Yum variables for the operating system type of the selected repository.
- Ensure that the process is running on Linux endpoints. For more information, see Patch process is not running on Linux endpoints.
- Re-create the Yum variables by clicking the Interact icon in the message.
Linux: Repo URLs were found but the snapshot could not be created, likely due to a Yum variable mismatch
This issue indicates that Patch could not resolve the listed Yum variables in the repository upstream URL.
- Ensure that the Patch process is running on Linux endpoints. For more information, see Patch process is not running on Linux endpoints.
- Ensure that custom Yum variables in the URL are accurate.
- Ensure that you have defined the custom Yum variables on your Linux endpoints.
- Reinitialize Patch, which runs the Patch - Repository variables sensor to gather Yum variables from Linux endpoints. For more information, see Initialize Patch on Windows and Linux endpoints . Alternatively, wait up to three hours for normal processing to gather the variables.
Last updated: 6/5/2023 2:50 PM | Feedback