Error code 0x80072F8F
rlwright
time appear to be out of sync with an update certificate.
I have tried registering all the DLLs from the KB, all settings in IE,
updating a clock that was already set correctly. Not sure how to bypass this
check for windows update but would love to bypass the check and perform
updates. This has been happening since 5/14 on 22 different servers running
Server 2003
312ben
controller GPO is being applied and that the WSUS settings are valid. I've
also checked the settings noted below, and can't determine what the issue
is. The servers never appear in the WSUS 3.0. I have about 15 other servers
that appear fine (they are not DCs). I get the following error in the
windowsupdate.log file on each of the DC servers-
2007-10-24 10:31:38:891 892 12f4 AU Triggering AU detection through
DetectNow API
2007-10-24 10:31:38:891 892 12f4 AU Triggering Online detection
(non-interactive)
2007-10-24 10:31:38:891 892 7fc AU #############
2007-10-24 10:31:38:891 892 7fc AU ## START ## AU: Search for updates
2007-10-24 10:31:38:891 892 7fc AU #########
2007-10-24 10:31:38:891 892 7fc AU <<## SUBMITTED ## AU: Search for updates
[CallId = {900BAFA8-06D4-4D5D-A3DD-BF472B81BDBD}]
2007-10-24 10:31:38:891 892 85c Agent *************
2007-10-24 10:31:38:891 892 85c Agent ** START ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2007-10-24 10:31:38:891 892 85c Agent *********
2007-10-24 10:31:38:891 892 85c Agent * Online = Yes; Ignore download
priority = No
2007-10-24 10:31:38:891 892 85c Agent * Criteria = "IsHidden=0 and
IsInstalled=0 and DeploymentAction='Installation' and IsAssigned=1 or
IsHidden=0 and IsPresent=1 and DeploymentAction='Uninstallation' and
IsAssigned=1 or IsHidden=0 and IsInstalled=1 and
DeploymentAction='Installation' and IsAssigned=1 and RebootRequired=1 or
IsHidden=0 and IsInstalled=0 and DeploymentAction='Uninstallation' and
IsAssigned=1 and RebootRequired=1"
2007-10-24 10:31:38:891 892 85c Agent * ServiceID =
{3DA21691-E39D-4DA6-8A4B-B43877BCB1B7}
2007-10-24 10:31:38:891 892 85c Misc WARNING: Send failed with hr = 80072f8f.
2007-10-24 10:31:38:891 892 85c Misc WARNING: SendRequest failed with hr =
80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
2007-10-24 10:31:38:891 892 85c Misc WARNING: WinHttp:
SendRequestUsingProxy failed for
<https://gtcrsce.GTCR.com:8531/selfupdate/wuident.cab>. error 0x80072f8f
2007-10-24 10:31:38:891 892 85c Misc WARNING: WinHttp:
SendRequestToServerForFileInformation MakeRequest failed. error 0x80072f8f
2007-10-24 10:31:38:891 892 85c Misc WARNING: WinHttp:
SendRequestToServerForFileInformation failed with 0x80072f8f
2007-10-24 10:31:38:891 892 85c Misc WARNING: WinHttp:
ShouldFileBeDownloaded failed with 0x80072f8f
2007-10-24 10:31:38:891 892 85c Misc WARNING: Send failed with hr = 80072f8f.
2007-10-24 10:31:38:891 892 85c Misc WARNING: SendRequest failed with hr =
80072f8f. Proxy List used: <(null)> Bypass List used : <(null)> Auth Schemes
used : <>
.
.
.
2007-10-24 10:31:39:031 892 85c Setup WARNING: SelfUpdate: Default Service:
IsUpdateRequired failed, error = 0x80072F8F
2007-10-24 10:31:39:031 892 85c Agent * WARNING: Skipping scan,
self-update check returned 0x80072F8F
2007-10-24 10:31:39:031 892 85c Agent * WARNING: Exit code = 0x80072F8F
2007-10-24 10:31:39:031 892 85c Agent *********
2007-10-24 10:31:39:031 892 85c Agent ** END ** Agent: Finding updates
[CallerId = AutomaticUpdates]
2007-10-24 10:31:39:031 892 85c Agent *************
2007-10-24 10:31:39:031 892 85c Agent WARNING: WU client failed Searching
for update with error 0x80072f8f
2007-10-24 10:31:39:031 892 f64 AU >>## RESUMED ## AU: Search for updates
[CallId = {900BAFA8-06D4-4D5D-A3DD-BF472B81BDBD}]
2007-10-24 10:31:39:031 892 f64 AU # WARNING: Search callback failed,
result = 0x80072F8F
2007-10-24 10:31:39:031 892 f64 AU # WARNING: Failed to find updates with
error code 80072F8F
2007-10-24 10:31:39:031 892 f64 AU #########
2007-10-24 10:31:39:031 892 f64 AU ## END ## AU: Search for updates
[CallId = {900BAFA8-06D4-4D5D-A3DD-BF472B81BDBD}]
2007-10-24 10:31:39:031 892 f64 AU #############
2007-10-24 10:31:39:031 892 f64 AU AU setting next detection timeout to
2007-10-24 16:31:05
2007-10-24 10:31:43:906 892 85c Report REPORT EVENT:
{21370507-8C24-4131-93EB-AF44FC09CA55} 2007-10-24
10:31:38:906-0500 1 148 101 {D67661EB-2423-451D-BF5D-13199E37DF28} 0 80072f8f SelfUpdate Failure Software
Synchronization Windows Update Client failed to detect with error 0x80072f8f.
2007-10-24 10:31:43:906 892 85c Report REPORT EVENT:
{E0B4AE05-87CA-4C27-8D81-0A7F1A8DAEB4} 2007-10-24 10:31:39:031-0500 1
Any ideas on what is happening is appreciated. I can go to the microsoft
update website manually and apply updates successfully. This is an issue with
internal WSUS setup that I'm trying to get working.
Thanks,
Ben
roofcleanerguy
It was a missing CA certificate.
What tipped me off was using Internet Explorer V7 I would get certificate warnings from completely secure sites (sites that I could reach from the same machine using firefox 3.0):
http://www.usps.gov , http://www.cleanertoday.com and http://www.canadapost.com all warned of certificate problems
(These are among the most trusted sites around. Cleaner Today even uses the EV-SSL certificate. The common thread I would later learn was that IE was missing a GTE CyberTrust Global Root Cert ).
More errors and clues you might see:
On screen error messages:
0x80072F8F and 80072F8F in Windows Update,and Windows Defender.
System EventLog Error:
Unable to Connect: Windows is unable to connect to the automatic updates service and therefore cannot download and install updates according to the set schedule. Windows will continue to try to establish a connection.
WindowsUpdate.log:
The error in the WindowsUpdate.log showed as a 0x80072F8F, which again unfortunately, when searched for, yields some trivial and incorrect KBs
( http://support.microsoft.com/kb/929458 and posts related to the time on the problem computer being out of sync with the Update server(s). While that would cause problems, that isn't what was going on in my case.)
The WindowsUpdate.log included an attempt (and 0x80072F8F failure) to connect to the following URL:
Server URL = https://www.update.microsoft.com/v6/ClientWebService/client.asmx
Solution:
In my case, the Microsoft Windows Update web server SSL cert was untrusted due to a missing root CA cert.
GTE CyberTrust Global Root cert was not installed. (It needed to be in the Trusted Root Certificates store)
Rather than mess with the individual missing certificates, I decided to directly download the current (July 2008 CAs).
I bypassed windows update and download the current certificates directly based on this KB article:
http://support.microsoft.com/kb/931125
Romano@discussions.microsoft.com Nicolas Romano
Nicolas Romano
lozhart
and my msn hasn't been able to let me sign in or download the new one, does this have anything to do with this, and how do you resolve the problem , thank you!
Roof CLeaner Guy wrote:
0x80072F8F Not a time error, but a missing SSL Root Cert masked as a time error.
20-Jul-08
Solution:
Previous Posts In This Thread:
On Friday, June 08, 2007 10:55 AM
rlwrigh wrote:
Error code 0x80072F8F
I am receiving error 0x80072F8F with the message: Your computer's date and
time appear to be out of sync with an update certificate.
I have tried registering all the DLLs from the KB, all settings in IE,
updating a clock that was already set correctly. Not sure how to bypass this
check for windows update but would love to bypass the check and perform
updates. This has been happening since 5/14 on 22 different servers running
Server 2003
On Wednesday, October 24, 2007 2:16 PM
312be wrote:
.
.
.
"rlwright" wrote:
On Sunday, July 20, 2008 5:19 PM
Roof CLeaner Guy wrote:
0x80072F8F Not a time error, but a missing SSL Root Cert masked as a time error.
Solution:
On Saturday, February 14, 2009 1:42 PM
Nicolas Roman wrote:
RE: Error code 0x80072F8F
"rlwright" wrote:
On Saturday, February 14, 2009 1:44 PM
NicolasRoman wrote:
RE: Error code 0x80072F8F
"312ben" wrote:
Submitted via EggHeadCafe - Software Developer Portal of Choice
ASP.NET Multi-Lingual Language Translations
http://www.eggheadcafe.com/tutorials/aspnet/ce499f06-7466-4b3a-9d56-766a992561ef/aspnet-multilingual-lan.aspx
lozhart
Also, my msn has not been letting me sign in or download the new one, is this because of the windows update not working,
Could you tell me any information you have about how i could fix this,
Thanks
Roof CLeaner Guy wrote:
0x80072F8F Not a time error, but a missing SSL Root Cert masked as a time error.
20-Jul-08
In My case ( Windows VISTA Home Premium ) the solution to the problem was NOT the time.
Solution:
Previous Posts In This Thread:
..
..
..
"rlwright" wrote:
Solution:
On Saturday, February 14, 2009 1:42 PM
Nicolas Roman wrote:
RE: Error code 0x80072F8F
"rlwright" wrote:
On Saturday, February 14, 2009 1:44 PM
NicolasRoman wrote:
RE: Error code 0x80072F8F
"312ben" wrote:
On Friday, December 04, 2009 4:51 PM
loz hart wrote:
Windows update not working
My windows update receives this error when searching for updates - The program can't check for definition updates - error code 0x80072F8F
and my msn hasn't been able to let me sign in or download the new one, does this have anything to do with this, and how do you resolve the problem , thank you!
Submitted via EggHeadCafe - Software Developer Portal of Choice
Flat file parsing with extra Line Feed at end..
http://www.eggheadcafe.com/tutorials/aspnet/028e5fce-868d-46f1-98ae-92b6e5eb44bf/flat-file-parsing-with-ex.aspx
Joe Williams
After appliying the updated root certificates like Roof Cleaner Guy posted It worked.
Download the rootsupd.exe from here:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e4f9b573-66d7-4dda-95d5-26c7d0f6c652
run the rootsupd.exe (I doesn?t show that it installs, but it does)
Then run windows update again.
It worked for me.
>>>> On Saturday, February 14, 2009 1:42 PM Nicolas Roman wrote:
>>>> "rlwright" wrote:
>>>>> On Saturday, February 14, 2009 1:44 PM NicolasRoman wrote:
>>>>> "312ben" wrote:
>>>>>> On Friday, December 04, 2009 4:51 PM loz hart wrote:
>>>>>> My windows update receives this error when searching for updates - The program can't check for definition updates - error code 0x80072F8F
>>>>>>
>>>>>>
>>>>>>
>>>>>> and my msn hasn't been able to let me sign in or download the new one, does this have anything to do with this, and how do you resolve the problem , thank you!
>>>>>>> On Friday, December 04, 2009 4:54 PM loz hart wrote:
>>>>>>> Hello, My windows update has not been able to check for updates recently, and i would like to get this problem fixed as soon as i can, it says - This program can't check for definition updates error code 0x80072f8f
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Also, my msn has not been letting me sign in or download the new one, is this because of the windows update not working,
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Could you tell me any information you have about how i could fix this,
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> Thanks
>>>>>>> Submitted via EggHeadCafe - Software Developer Portal of Choice
>>>>>>> Kentico CMS for ASP.NET Sites
>>>>>>> http://www.eggheadcafe.com/tutorials/aspnet/ee551a85-2206-446e-bc7d-c978f60ec671/kentico-cms-for-aspnet-sites.aspx