Skip to content

Commit b4ae4c9

Browse files
ryanberg-aquentryanberg-aquent
committed
Updates for CI 8135
1 parent cab4ea6 commit b4ae4c9

3 files changed

Lines changed: 74 additions & 0 deletions

File tree

support/windows-server/installing-updates-features-roles/media/error-0x80072f8f-windows-update-ssl-fails/updateerror0x80072f8f_wusaerror.png renamed to support/windows-server/installing-updates-features-roles/media/troubleshoot-windows-update-error-0x80072f8f/updateerror0x80072f8f-wusaerror.png

File renamed without changes.

‎support/windows-server/installing-updates-features-roles/troubleshoot-windows-update-error-0x80072f8f.md‎

Lines changed: 72 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,72 @@
1+
---
2+
title: Troubleshoot Windows Update Error 0x80072f8f
3+
description: Learn how to resolve Windows Update error 0x80072f8f on Windows.
4+
manager: dcscontentpm
5+
audience: itpro
6+
ms.date: 01/15/2025
7+
ms.topic: troubleshooting
8+
ms.reviewer: kaushika, maeltedebay, v-lianna
9+
ms.custom:
10+
- sap:windows servicing,updates and features on demand\windows update fails - installation stops with error
11+
- pcy:WinComm Devices Deploy
12+
appliesto:
13+
- <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Supported versions of Windows Server</a>
14+
---
15+
16+
# Troubleshoot Windows Update error 0x80072f8f
17+
18+
## Summary
19+
20+
When attempting to connect to Windows Update, you might encounter error 0x80072f8f. This error usually indicates issues with SSL negotiation due to out-of-sync clock settings or untrusted SSL certificates.
21+
22+
:::image type="content" source="./media/troubleshoot-windows-update-error-0x80072f8f/updateerror0x80072f8f-wusaerror.png" alt-text="Windows Update error 0x80072f8f" lightbox="media/troubleshoot-windows-update-error-0x80072f8f/updateerror0x80072f8f_wusaerror.png":::
23+
24+
## Prerequisites
25+
26+
Ensure you've backed up the OS disk. For more information, see [Backup OS Disk](/azure/backup/about-azure-vm-restore).
27+
28+
## How to identify the issue
29+
30+
### Symptom 1
31+
32+
Windows Update fails with error 0x80072f8f. Check the `WindowsUpdate.log` located at *C:\Windows\Logs\WindowsUpdate* for entries similar to the following:
33+
34+
```output
35+
03E4 1668 SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/10.0.14393.0/0?CH=531&L=en-US&P=&PT=0x7&WUA=10.0.14393.1794
36+
03E4 1668 Misc Send request failed, hr:0x80072f8f
37+
03E4 1668 Misc WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f; retrying with default proxy.
38+
03E4 1668 Misc Send request failed, hr:0x80072f8f
39+
03E4 1668 Misc Library download error. Error 0x80072f8f. Will retry. Retry Counter:0
40+
```
41+
42+
### Symptom 2
43+
44+
When downloading updates from Windows Update, there's no progress. The `WindowsUpdate.log` shows failures on WinHTTP requests to `SLS.Update.Microsoft.com`:
45+
46+
```output
47+
2032 2248 ComApi * START * Federated Search ClientId = Device Driver Retrieval Client (cV: xXbBtDYuUUOnH3AK.1.0)
48+
4744 4120 Misc *FAILED* [80072F8F] Send request
49+
4744 4120 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)
50+
4744 4120 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0
51+
```
52+
53+
### Symptom 3
54+
55+
When checking for updates from Windows Update, there's no progress. The `WindowsUpdate.log` indicates `HTTP Send Request failed with 0x80072f8f (WININET_E_DECODING_FAILED)`:
56+
57+
```output
58+
7452 3228 Misc *FAILED* [80072F8F] Send request
59+
7452 3228 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)
60+
7452 3228 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0
61+
```
62+
63+
## Root cause
64+
65+
The error 0x80072f8f is usually caused by:
66+
67+
- **Out-of-sync clock**: If the clock settings on the computer are incorrect, SSL negotiation will fail. You can quickly verify clock accuracy from `WindowsUpdate.log` which always prints traces in local time.
68+
- **Untrusted SSL certificate**: In managed scenarios with Windows Server Update Services (WSUS) or Configuration Manager configured over SSL with self-generated or signed SSL certificates, if the client doesn't trust the certificate chain, the scan fails.
69+
70+
## Resolution
71+
72+
Perform an [in-place upgrade](/azure/virtual-machines/windows-in-place-upgrade) on the Windows virtual machine.

‎support/windows-server/toc.yml‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3222,6 +3222,8 @@ items:
32223222
href: installing-updates-features-roles/troubleshoot-windows-update-error-0x80070490.md
32233223
- name: Troubleshoot "Shutdown in Progress" Windows error 0x8007045b
32243224
href: installing-updates-features-roles/troubleshoot-error-shutdown-in-process.md
3225+
- name: Troubleshoot Windows Update error 0x80072f8f
3226+
href: ./installing-updates-features-roles/troubleshoot-windows-update-error-0x80072f8f.md
32253227
- name: Troubleshoot Windows Update error 0x8024002E
32263228
href: installing-updates-features-roles/troubleshoot-windows-update-error-code-0x8024002e.md
32273229
- name: WUSA returns 0x5 ERROR_ACCESS_DENIED

0 commit comments

Comments
 (0)