|
| 1 | +--- |
| 2 | +title: Troubleshoot Windows Update Error 0x80072f8f |
| 3 | +description: Learn how to resolve Windows Update error 0x80072f8f on Windows. |
| 4 | +manager: dcscontentpm |
| 5 | +audience: itpro |
| 6 | +ms.date: 11/6/2025 |
| 7 | +ms.topic: troubleshooting |
| 8 | +ms.reviewer: scotro, mwesley, jarretr, v-ryanberg, v-gsitser |
| 9 | +ms.custom: |
| 10 | +- sap:windows servicing,updates and features on demand\windows update fails - installation stops with error |
| 11 | +- pcy:WinComm Devices Deploy |
| 12 | +appliesto: |
| 13 | + - <a href=https://learn.microsoft.com/windows/release-health/windows-server-release-info target=_blank>Supported versions of Windows Server</a> |
| 14 | +--- |
| 15 | + |
| 16 | +# Troubleshoot Windows Update error 0x80072f8f |
| 17 | + |
| 18 | +## Summary |
| 19 | + |
| 20 | +When you try to connect to Windows Update, you encounter error 0x80072f8f. This error typically indicates issues that affect SSL negotiation because of out-of-sync clock settings or untrusted SSL certificates. |
| 21 | + |
| 22 | +:::image type="content" source="./media/troubleshoot-windows-update-error-0x80072f8f/updateerror0x80072f8f-wusaerror.png" alt-text="Windows Update error 0x80072f8f" lightbox="media/troubleshoot-windows-update-error-0x80072f8f/updateerror0x80072f8f-wusaerror.png"::: |
| 23 | + |
| 24 | +## Prerequisites |
| 25 | + |
| 26 | +For virtual machines (VMs) running Windows in Azure, make sure that you back up the OS disk. For more information, see [About Azure Virtual Machine restore](/azure/backup/about-azure-vm-restore). |
| 27 | + |
| 28 | +## How to identify the issue |
| 29 | + |
| 30 | +### Symptom 1 |
| 31 | + |
| 32 | +Windows Update fails and returns error 0x80072f8f. Check the `WindowsUpdate.log` located at *C:\Windows\Logs\WindowsUpdate* for entries that resemble the following entry: |
| 33 | + |
| 34 | +```output |
| 35 | +03E4 1668 SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/10.0.14393.0/0?CH=531&L=en-US&P=&PT=0x7&WUA=10.0.14393.1794 |
| 36 | +03E4 1668 Misc Send request failed, hr:0x80072f8f |
| 37 | +03E4 1668 Misc WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f; retrying with default proxy. |
| 38 | +03E4 1668 Misc Send request failed, hr:0x80072f8f |
| 39 | +03E4 1668 Misc Library download error. Error 0x80072f8f. Will retry. Retry Counter:0 |
| 40 | +``` |
| 41 | + |
| 42 | +### Symptom 2 |
| 43 | + |
| 44 | +When you try to download updates from Windows Update, you see no progress. The `WindowsUpdate.log` shows failures on WinHTTP requests to `SLS.Update.Microsoft.com`: |
| 45 | + |
| 46 | +```output |
| 47 | +2032 2248 ComApi * START * Federated Search ClientId = Device Driver Retrieval Client (cV: xXbBtDYuUUOnH3AK.1.0) |
| 48 | +4744 4120 Misc *FAILED* [80072F8F] Send request |
| 49 | +4744 4120 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy) |
| 50 | +4744 4120 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0 |
| 51 | +``` |
| 52 | + |
| 53 | +### Symptom 3 |
| 54 | + |
| 55 | +When you check for updates from Windows Update, you see no progress. The `WindowsUpdate.log` indicates `HTTP Send Request failed with 0x80072f8f (WININET_E_DECODING_FAILED)`: |
| 56 | + |
| 57 | +```output |
| 58 | +7452 3228 Misc *FAILED* [80072F8F] Send request |
| 59 | +7452 3228 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy) |
| 60 | +7452 3228 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0 |
| 61 | +``` |
| 62 | + |
| 63 | +## Cause |
| 64 | + |
| 65 | +This error is usually caused by one of the following issues: |
| 66 | + |
| 67 | +- **Out-of-sync clock**: If the clock settings on the computer are incorrect, SSL negotiation fails. You can quickly verify clock accuracy from `WindowsUpdate.log` that always prints traces in local time. |
| 68 | +- **Untrusted SSL certificate**: This issue occurs in the following managed scenarios: |
| 69 | + - For Windows Server Update Services (WSUS). |
| 70 | + - For Configuration Manager that's configured over SSL and includes self-generated or signed SSL certificates. |
| 71 | + |
| 72 | +In these scenarios, the scan fails if the client doesn't trust the certificate chain. |
| 73 | + |
| 74 | +## Resolution |
| 75 | + |
| 76 | +For Windows-based computers, perform an [in-place upgrade](/windows-server/get-started/perform-in-place-upgrade#perform-the-in-place-upgrade). |
| 77 | + |
| 78 | +For VMs running Windows in Azure, see [in-place upgrade on the Windows virtual machine](/azure/virtual-machines/windows-in-place-upgrade). |
0 commit comments