Exchange Service Pack 3 upgrade Installation Failed at Mailbox Server role

Got the below error message while installing Exchange Server 2010 SP3

[ERROR]

The following error was generated when "$error.Clear();

      $name = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxUniqueName;

          $dispname = [Microsoft.Exchange.Management.RecipientTasks.EnableMailbox]::DiscoveryMailboxDisplayName;

          $dismbx = get-mailbox -Filter {name -eq $name} -IgnoreDefaultScope -resultSize 1;

          if( $dismbx -ne $null)

          {

            $srvname = $dismbx.ServerName;

            if( $dismbx.Database -ne $null -and $RoleFqdnOrName -like "$srvname.*" )

            {

              Write-ExchangeSetupLog -info "Setup DiscoverySearchMailbox Permission.";

              $mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true };

              if( $mountedMdb -eq $null )

              {

                Write-ExchangeSetupLog -info "Mounting database before stamp DiscoverySearchMailbox Permission...";

                mount-database $dismbx.Database;

              }

              $mountedMdb = get-mailboxdatabase $dismbx.Database -status | where { $_.Mounted -eq $true };

              if( $mountedMdb -ne $null )

              {

                $dmRoleGroupGuid = [Microsoft.Exchange.Data.Directory.Management.RoleGroup]::DiscoveryManagementWkGuid;

                $dmRoleGroup = Get-RoleGroup -Identity $dmRoleGroupGuid -DomainController $RoleDomainController -ErrorAction:SilentlyContinue;

                if( $dmRoleGroup -ne $null )

                {

          Add-MailboxPermission $dismbx -User $dmRoleGroup.Identity -AccessRights FullAccess -DomainController $RoleDomainController -WarningAction SilentlyContinue;

                }}} }

"Couldn't resolve the user or group "xyz.com/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust.".

[ERROR]

Couldn't resolve the user or group "xyz.com/Microsoft Exchange Security Groups/Discovery Management." If the user or group is a foreign forest principal, you must have either a two-way trust or an outgoing trust.

[ERROR]

The trust relationship between the primary domain and the trusted domain failed.

Resolution: 

There are two ways to fix this issue.

1. Disable the discovery Mailbox and try install Service Pack
2. Delete the discovery search mailbox and try install

1st ways to fix the issue:

1. Disable the Discovery Search mailbox and re-enable it after installation.

Disable-Mailbox –identity “UPN of Discovery mailbox”

Install the Exchange server sp3

Enable Mailbox

Enable-Mailbox –identity “UPN of Discovery mailbox”

Fix Permissions

Add-MailboxPermission –Identity “UPN of Discovery mailbox” –User ”Discovery Management” –AccessRights FullAccess

2nd ways to fix the issue.

Delete the Discovery Search mailbox user account from Active Directory

Prepare Active Directory by running Microsoft Exchange 2010 Setup with the /PrepareAD switch in the root domain of your Active Directory forest.

Use the Shell to enable the Discovery system mailbox.
Enable-Mailbox -Arbitration -DomainController <FQDN of root global catalog server> -Identity "SystemMailbox{e0dc1c29-89c3-4034-b678-e6c29d823ed9}"

Note:

By default, Exchange Server 2010/13 Setup creates the mailbox in the Users container in Active Directory.

You can't use the EAC to enable the Discovery system mailbox.

You must specify the fully qualified domain name (FQDN) of a global catalog server in the root domain of the Active Directory forest.

Source : http://technet.microsoft.com/en-us/library/gg588318(v=exchg.150).aspx