Symptom
You receive the following error when attempting to verify the Account settings in Shavlik Patch: ID4257: x.509 certificate 'CN=*.shavlik.com......validation failed by the token holder
Cause
Shavlik Patch is not able to validate the certificates.
Solution
1. Ensure you are running the latest version of Shavlik Patch, at least version 2.1.810. There was a critical certificate change in this update and is required.
2. Add the following URLs to your firewall access list
http://gtssl-ocsp.geotrust.com
http://csc3-2010-crl.verisign.com
http://csc3-2010-aia.verisign.com
http://*.symcb.com
http://Cacerts.digicert.com
Affected Product(s)
Shavlik Patch for Microsoft System Center (SCUPdates)