JonFromRHS

Could also be that they havent got to your license key information yet.

are you using the SQL Server Express? From previous experience (now using BromCom) the SQL Server express is limited to a 10GB database as imposed by Microsoft.

Did you do the intial "fix" to get it working by changing your Proxy etc as this would need to be put back to default before you tried it?

Back on here too using my existing Activation Code from previous installation.

Mine is licensed until September 2027 lol.

The server itself still has to check in with Impero that its a validated version and license for the installed application.

Affecting us too here in North Wales - Wrexham. All of our LA schools that are utilising Impero are having the same issue of the server asking to register again with Impero and the acitvation code. Here we don't automatically assume Smoothwall we assume the VM server administrator may have run some updates that broke it lol.

I get the occassional connection issue with the printer especially at Sticker roll change. Our WiFi turns off over night from around 8pm until 7am too which doesnt seem to affect the Sign in App iPad. However when our VM's undergo maintenance from our LA and need to be restarted sometimes this can cause an issue on our iPad with either BT or WiFi or both lol.

Have you checked the settings on the iPads Sign in App for night mode etc. We had a member of staff (cleaner) who was coming in at 6am to clean and the iPad sign in app settings didnt switch the app on until around 7am. I had to go into the settings for the app (within the app itself on the iPad) and adjust its dark mode times. Just a thought.

DM'd you the onedrive link

Just running it on my own office machine now with an installer from 17-4-26 Successfully installed. I will add this msi to my onedrive and DM you a link to it.

Further checking System Clock Roll back (bios and OS) check installation. Create a 25H2 clean build or VM Test WJEC Surpass on the clean Environment. Then once and for all you have evidence of it being the Harpy configuration file that is containing an invalid security signature for the date required especially if you do a clock roll back as suggested at the end.

Ok referred Gemini to the message it gave prior asking if the machine is clean with nothing remaining from the previous WJEC Surpass installation is it safe to assume its the HARPY CONFIGURATION causing the issues. Yes, your assumption is spot on. If you are working with a clean 25H2 machine with no residual folders, and you are still seeing that specific error, the issue is almost certainly the Harpy configuration file bundled within the installer itself. Here is a breakdown of why the Harpy configuration is the culprit in this scenario: 1. The "Hard-Coded" Expiry The Harpy configuration (specifically Harpy.v1.eeagle) acts as a digital "seal" for the software's security environment. It isn't just a setting; it's a signed resource. If the certificate within that file expired on 2026-01-19, and your system clock is currently past that date, the software's internal security check (the Trusted Configuration validation) will fail immediately. Because the machine is "clean," you've ruled out old cached files. This means the source installer contains the expired certificate. 2. Why 25H2 Doesn't Fix It Operating system versions (like 25H2) provide the environment, but they don't override the internal security logic of third-party apps like Surpass. Even on the newest OS, the software is programmed to trust its own files only if the signature is valid. The error at DatabaseMigrationCommon.cs confirms that the software is "self-policing"—it checks its own health before it even finishes setting up the local database. The Verdict The Harpy configuration is definitely to blame, but specifically, it is the version of that file contained within your installation media. How to verify this: If you have access to the installer files (e.g., if you can extract the .msi or browse the setup files), you would likely find that the version of Harpy.v1.eeagle bundled there is the one that expired in January 2026. The Fix: You cannot manually "fix" the Harpy file because it is a signed security resource—tampering with it would also cause a validation failure. You effectively need a new installer from WJEC/Surpass that has been re-signed with a new certificate valid beyond 2026. Quick Tip for IT Admins: If you are in a time crunch and just need to verify this is the issue, temporarily rolling back the system clock to a date in 2025 should allow the installer to proceed. Note: This is only for testing/confirmation; do not do this for actual exams as it will likely cause sync issues with the Surpass servers.

are you performing a clean install with nothing remaining from the previous installs?

I just meant to rule it out as being a possible cause. just run you error through Gemini and it came back with this information. The error message indicates that a security configuration file (Harpy.v1.eeagle) has an expired trust certificate. Specifically, the configuration is "not valid after 2026-01-19." Because this file is part of the core licensing and "Trusted Configuration" resource for the WJEC SecureClient, the software is blocking the installation or launch because it views the local package as compromised or outdated. Recommended Solutions Since you are deploying this on 25H2 machines, there are three primary ways to resolve this: 1. Download the Updated Installer from WJEC The most common cause for this error is using an older .msi or .exe installer that was bundled with a certificate which has now expired. Log in to the WJEC Secure Website or the Surpass Portal. Download the absolute latest version of the SecureClient installer. Note: If your current installer was downloaded prior to January 2026, it will likely continue to fail with this specific "Harpy" error. 2. Perform a "Clean" Reinstall If the new installer fails, residues from the previous installation (including the expired Harpy configuration) may be interfering. Uninstall the existing WJEC SecureClient. Manually delete the following folders if they remain: C:\Program Files (x86)\SecureClient\SecureClient_WJEC C:\ProgramData\Surpass (This often contains cached configuration GUIDs). Restart the machine and run the latest installer as an Administrator. 3. Check System Time and Date While the error explicitly mentions a 2026 expiry, ensure the system clock on your 25H2 machines is synchronized. If a CMOS battery is failing or the BIOS time is incorrect, the trust validation for the Licensing.Core plugin will fail immediately. Technical Context for IT Admins The error highlights a failure in the DatabaseMigrationCommon.cs at Line 108. This suggests that during the initial setup/migration of the local database: The client attempts to verify its "Trusted configuration." It finds that the Harpy configuration (which governs the SecureClient’s locked-down environment) is no longer valid. The "change count of 0" indicates it hasn't been updated or patched locally to extend that validity. If you are deploying via SCCM or Intune: Ensure you are not accidentally deploying a cached version of the app. Refresh your application package with the latest binaries provided by WJEC/BTL.

previous deployments have been via GPO and attaching the MSI to the room OU in GPO management. however since that deployment I use IMPERO to run the app and allow it auto update during start up. We are running 24H2 though. Can you set up a 24H2 VM to test if you still get the same errors? Could be Surpass haven’t updated their MSI for use with 25H2 yet?

Sorry just checked the date stamp on the MSI and its 17-4-26 that it was downloaded from WJEC Surpass so only a week old. https://wjec.surpass.com/launchtest/securedelivery

Must admit this sparked my curiosity as I havent loaded mine for about 2 months. Just loaded up straight away - I have been regularly (once per term) loading these up using IMPERO to sign them in and then check the room to make sure they are on the Login Screen for the Surpass testing. On a fresh MDT build I did the other week I downloaded at the start of this month the latest updated MSI file and its working on that one too without any errors.

one thing I know for certain is the thumbnail view on IMPERO shows a blank desktop minus the task bar across the bottom but not sure on client end what happens.

I can test this next week for you. not sure if it fails to load or just fails to show a preview.

No need to disable the IMPERO client - its worked by manually logging on and running the application. Just testing now to see if I can remotely log on and run the file using IMpero and have it come up the same or whether it fails. If it fails it means I would have to manually start the applications during exam season. Edit It can still be run using IMPERO but you cannot have the THUMBNAIL Preview showing the desktop screen. Needs to just be the IMPERO computer list rather than thumbnails of whats happening. Edit 2 I am not turning off the Impero software instead I am not viewing their screens and it works.

Correct its not our sole safeguarding method just another tool but if we need to remove it completely the IT teachers wont be happy as they use it as a teaching tool to get attention of students, send files etc etc.

It could just be the viewing of the screen during remote control. Will be testing this after lunch (which cant come soon enough lol) and will report back if its resolved the issue. Then I will test whether I can still logon via impero and run the shortcut file path to load the application without viewing the screen itself. But I agree with your statement 100%

Cheers bud will give this a go.

Does that mean I need to remove IMPERO from the machines we are using it on? Or just load it manually on the machine?