[German]Some Windows users (from Windows 7 up to Windows 11, and also Windows Server pendants) facing the situation, that no longer receive automatic updates. When they investigate the problem, they get the update error 0x80072F8F. In the blog post I try to collect some hints, what may causes this behavior. The post is a translation from my German blog post, dated from June 2014 – but it's still valid.
Advertising
First of all: The error can have different causes – but what is common is that Windows Update can no longer successfully check via the update server whether updates are available. The error code 0x80072F8F ("ERROR_INTERNET_DECODING_FAILED") means that the Internet decoding has failed. Specifically, a timestamp can no longer be reconciled between Windows Update and the update server.
Time and date settings incorrect
This Technet article from 2011 then also mentions the most likely cause. The time and date settings are simply incorrect – the Internet time of the Windows computer cannot be synchronized with the time stamp of the global update server. The time information is kept in the Secure Sockets Layer (SSL) certificate of the Windows Update web page. As a result, the Windows Update scanning process can no longer verify that updates are scheduled for the Windows system. This has also been addressed in my German blog post here about Windows 7 – but also applies to Windows 8/8.1 and Windows 10/11.
I've had this happen before when I advanced a virtual machine's clock by two months for a test and then forgot to reset it. Suddenly there was the update error.
The remedy in this case is to check the time settings (see also). For example, you can click on the time display of the taskbar and select Change date and time settings. On the Internet Time tab, select the Change Settings button and confirm the User Account Control prompt. Then in the Internet Time Settings dialog box it is possible to synchronize with an Internet time server.
If necessary, you should try alternative time servers. If this does not help, it is recommended to check and adjust the time zone on the Date and Time tab/settings page. The properties window can also be accessed via the Control Panel. It is important that a synchronization of the Internet time is possible successfully. Afterwards, if necessary, perform a reboot and check whether the updates are delivered again.
Advertising
Check SSL certificate
Is the Internet time of the computer correct? In this (German) MS forum thread users state that this setting has been checked. Also interfering software like VPN programs or foreign internet security suites, which can have an influence, are said to have been removed from the system. Then what comes to my mind is that it may also be that the SSL certificate used during Windows Update is no longer trusted or is faulty. In this context, I would like to refer to this blog post, which mentions further testing possibilities for certificates. So if necessary, investigate there as well. And under [a1] I have already addressed the problem in connection with the TMG server.
TLS 1.0 issue is causing the error
Addendum: In 2022, another problem has been added: Some Microsoft servers from which the updates (or ISO image files) are obtained are no longer capable of TLS 1.0. Then the download fails with error 0x80072F8F. A German blog reader describes a workaround via registry to enable TLS 1.0:
After days of trying on error 80072F8F (time, certificates, services, etc.) I came to the REG_DWORD value Enabled in the following key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\ClientThe value was set to "0" instead of "1". A value of "1" resulted, that the updates are found immediately.
Also this MS answers forum thread mentioned that behavior for MCC-Downloads.
Similar article (from German blog):
a1: Neues zum Update-Fehler 80072f8f beim TMG-Server
a2: Windows 7-Update Fehler 80072F8F/ 80246007
