Troubleshoot PN Upgrade Problems Use the following table to troubleshoot problems with your protected nodes during or following an upgrade. Symptom What’s it mean? What do I do? You see the following error during a PN upgrade following an onQ upgrade and protection restart: Error updating service on many 2003 PNs (msi: code 800b0101) The global root certificate on your Windows PN is invalid or expired. The upgrade is not the cause; moreover, any industry software upgrade requires a valid global root certificate. Do the following: 1. Install a new global root certificate on the PN from https://support.globalsign.com/customer/portal/articles/1426602-globalsign-root-certificates. 2. Perform a Windows update.