Views:
When FIPS mode is enabled, xxxx_f.sig files are required for validation when downloading components for the Relay, the _f.sig files are not available for Deep Security Agent version 8.0 and 9.0 resulting to failed download. 


Workaround

Option A: Remove version 8.0 and 9.0 Agent packages from DSM Local software list. Then perform Security Update again.
Option B: Modify DSM server hidden settings “Allow supported 8.0 and 9.0 Agents to be updated” set the value from “True” to “False” via SQL statement.
  1. Stop Deep Security Manager(DSM) service.
  2. Connect to the DSM database and execute the SQL statement to update hidden setting and check result. 
    update systemsettings set Value = 'false' where UniqueKey = 'settings.configuration.supportPreLegoAgents';
select * from systemsettings where UniqueKey = 'settings.configuration.supportPreLegoAgents';
  3. Start Start the DSM service.
  4. Perform the Security Update for the Relay again.
Keywords: STATUS_CHECK_DIGITAL_SIGNATURE_FAILURE, Error Code: -21, Security Update Failed