Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

These are very generic Store App Error Codes which could potential mean anything. Nevertheless we see a strong correlation if SSL Inspection is active for the affected Client(s)


Manager is installed but Agent Installation is failing - 0x800704EC; 0x80190193 - AppLocker

The TrueDEM Manager logs are indicating that the destination location for the msixbundle app (local device) could not be opened/accessed.  This is due to AppLocker.
Please add an exclusion rule for the TrueDEM App → AppLocker - Allow Rule

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule


Manager is installed but Agent Installation is failing - 0x80073D01- AppLocker

The package deployment operation is blocked by policy

Please add an exclusion rule for the TrueDEM App → AppLocker - Allow Rule

https://learn.microsoft.com/en-us/windows/security/application-security/application-control/windows-defender-application-control/applocker/configure-exceptions-for-an-applocker-rule



Manager is installed but Agent Installation is failing - 0x800B010A - Certificates

Error 0x800B010A: The root certificate and all intermediate certificates for the signature in the app package or bundle must be trusted is the message one would see in the TrueDEM Manager Logs.

This can happen if the Intermediate certificate is missing on the local client, the client tries it to retrieve it from the Global Sign online repository (see URL below). If online access is denied, agent installation will fail with this error.
http://secure.globalsign.com/cacert/gsgccr45evcodesignca2020.crt

Updating the Agent version to 1.25.4 or higher should also resolve the problem.

Manager is installed but Manager Logs shows a http 407 Event

This occurs when the TrueDEM Manager is unable to reach the autodiscover.truedem.com service where the Agent (Store App) is being pulled from.
In that case 407 indicates that a HTTP Proxy is in between which requires a proxy authentication. Please exclude the urls mentioned in our Client Requirements Doc.


Citrix: Agent is installed in Image, but shows 0x8007010B in  Appxlog

This Error is again a very generic one(Windows Update, Store). However one of the reason why such error is seen for Citrix deployment is, that no License file has been used during Add-AppxProvisionedPackage. Please make sure that the correct Licensefile is specified by  -LicensePath in the installation string (Add-AppxProvisionedPackage)


Group Policy "hints"

In order to verify that Group Policies are not causing the issue, please run the following command to check which GPOs are active.

gpresult /h gpreport.html

An html report gets created in which one can see all active/inactive GPOs on the Client


EventViewer "hints"

The EventViewer provides further useful hints when it comes to Store Installation/Update issues. These are the following entries underneath of \Application and Services Logs\Microsoft\Windows\Appx*


AADSTS50158

This error code can mean a lot. Please execute the following powershell code to identify if the error is related to an outdated Microsoft AAD Broker Plugin

Get-AppxPackage | Where { $_.Name -eq 'Microsoft.AAD.BrokerPlugin' }