No symptoms information.
No cause information.
Before installing a Dell Update Package (DUP) from the Dell Support Website
or BIOS packages that are generated by Dell Command | Configure on a computer running Windows 7 (32-bit or 64-bit versions), Microsoft Windows update KB3033929 must be installed. The guidelines below provide more information about this update, Dell Update Package (DUP), and BIOS packages generated by Dell Command | Configure.
Dell Update Package, Dell Command | Configure - BIOS package, and Microsoft KB3033929
Microsoft has published the security advisory below for applications running on Windows 7 and Windows Server 2008 Operating Systems, which support the SHA2 hashing algorithm: Microsoft security advisory: Availability of SHA-2 code signing support for Windows 7 and Windows Server 2008 R2: March 10, 2015
. Following the security advisory, Dell Update Package (DUP) shall be signed only with the SHA-2 hashing algorithm starting February 1, 2019.
How this security update affects the Dell Update Package (DUP) available at the Dell Support website or BIOS packages that Dell Command generates | Configure
The Dell Update Package (DUP) provides a uniform framework (UI and Command Line Interface support) to deliver single-click installers containing Drivers, Applications, BIOS, and Firmware to Dell client commercial and consumer computer customers.
The Dell Update Package (DUP) is available for download at the Dell Support Website
and carried in different catalogs--for example, Platform Catalog, PDK Catalog, Microsoft System Center Update Catalog. The catalogs are used by Dell Command product suite, third-party integrations, and Microsoft System Configuration Manager for delivering and installing the updates on your Dell computer. For more information about using the Dell Update Package, see the following reference: Dell Update Packages User’s Guide
The Dell Update Packages (DUP) are dual-signed using SHA-1 and SHA-2 hash algorithms so far. Starting February 1, 2019, the Dell Update Packages (DUPs) are signed only with an SHA-2 hashing algorithm to allow the Dell Update Package (DUP) to be more secure. SHA-1 signing is deprecated in Dell Update Package (DUP).
Dell Command | Configure provides the configuration capability to business client computers and allows the users to create BIOS packages (in the form of an executable) containing correct settings to apply to a target client computers. For more information about using the Dell Command | Configure, see the following reference: Dell Command | Configure User’s Guide
The contents of the Dell Command | Configure - BIOS package including the binaries are signed with SHA-2 hashing algorithm.
According to Microsoft recommendations, the KB article KB3033929
is a prerequisite and must be installed on the computer to support the SHA-2 hashing algorithm in Windows 7 and Windows Server 2008 computers.
If KB3033929 is not installed, you get an error: "Windows can’t verify the publisher of this driver software"
while you attempt to install the DUP executable downloaded from the Dell Support Website
using either command line or DUP UI or the Dell Command | Configure - BIOS Package (executable) on Dell Client commercial and consumer computers.
If KB3033929 is installed on the computer, or the computer is running a different operating system higher than Windows 7 or Windows Server 2008, then this error message will not be shown and the installation process will continue successfully.
The End User / IT Administrator must ensure that KB3033929 is installed on Dell client commercial and consumers computers running on Windows 7 operating systems (32-bit or 64-bit) before attempting to install the Dell Update Package or Dell Command | Configure - BIOS package, or when encountering the above error and before re-attempting to install the particular Dell Update Package or Dell Command | Configure - BIOS package.
The KB can be downloaded from Microsoft from the following site by selecting the Windows 7 operating system and architecture: KB3033929
. Also, it is recommended to upgrade the computer to the latest update available from Microsoft.