Werk #13854: Agent bakery: Windows agent MSI is not signed anymore
Component | Agent bakery |
Title | Agent bakery: Windows agent MSI is not signed anymore |
Date | Apr 4, 2022 |
Checkmk Edition | Checkmk Enterprise (CEE) |
Checkmk Version | 2.2.0b1 2.1.0b6 |
Level | Trivial Change |
Class | Bug Fix |
Compatibility | Compatible - no manual interaction needed |
Previously, provided by the WATO MSI file with Windows agent retained a digital code signature from the original MSI file. Because, in fact, the MSI file is a patched( rebuilt ) version of the original file from the distro, Windows considered this signature to be invalid. Having a wrong signature is worse than having no signature at all. Since we have currently no mechanism to sign MSI files in the bakery, we removed the signature completely from these files.
Since this release, WATO bakes agent's MSI using the unsigned version of the MSI file, thus solving the problem.