Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Summary
When you try to connect to Windows Update, you encounter error 0x80072f8f. This error typically indicates issues that affect SSL negotiation because of out-of-sync clock settings or untrusted SSL certificates.
Prerequisites
For virtual machines (VMs) running Windows in Azure, make sure that you back up the OS disk. For more information, see About Azure Virtual Machine restore.
How to identify the issue
Symptom 1
Windows Update fails and returns error 0x80072f8f. Check the WindowsUpdate.log located at C:\Windows\Logs\WindowsUpdate for entries that resemble the following entry:
03E4 1668 SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/10.0.14393.0/0?CH=531&L=en-US&P=&PT=0x7&WUA=10.0.14393.1794
03E4 1668 Misc Send request failed, hr:0x80072f8f
03E4 1668 Misc WinHttp: SendRequestToServerForFileInformation failed with 0x80072f8f; retrying with default proxy.
03E4 1668 Misc Send request failed, hr:0x80072f8f
03E4 1668 Misc Library download error. Error 0x80072f8f. Will retry. Retry Counter:0
Symptom 2
When you download updates from Windows Update, you see no progress. The WindowsUpdate.log shows failures on WinHTTP requests to SLS.Update.Microsoft.com:
2032 2248 ComApi * START * Federated Search ClientId = Device Driver Retrieval Client (cV: xXbBtDYuUUOnH3AK.1.0)
4744 4120 Misc *FAILED* [80072F8F] Send request
4744 4120 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)
4744 4120 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0
Symptom 3
When you check for updates from Windows Update, you see no progress. The WindowsUpdate.log indicates HTTP Send Request failed with 0x80072f8f (WININET_E_DECODING_FAILED):
7452 3228 Misc *FAILED* [80072F8F] Send request
7452 3228 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)
7452 3228 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0
Cause
This error is usually caused by one of the following issues:
- Out-of-sync clock: If the clock settings on the computer are incorrect, SSL negotiation fails. You can quickly verify clock accuracy from
WindowsUpdate.logthat always prints traces in local time. - Untrusted SSL certificate: In managed scenarios for Windows Server Update Services (WSUS) or Configuration Manager that's configured over SSL and includes self-generated or signed SSL certificates, the scan fails if the client doesn't trust the certificate chain.
Resolution
Perform an in-place upgrade on the Windows virtual machine (VM).