Jan 19

Windows Update – Error 0x80072F8F

This is a common issue with all Microsoft operating system after Windows XP (XP, 2000, 2003, Vista, 7, 2008, 2008 R2). So you are trying to get your Windows Update and you get error 80072F8F. You try again, same thing. You now probably think that you computer/server need a reboot … after reboot … still 80072F8F. Now what, you google “Windows Update error 80072F8F“. You probably found this knowledge base article (KB929458)

In this article, Microsoft propose 4 method to fix this issue. In most case one of those method should fix the issue but in my case none of them worked. I got this error on a Windows Server 2008 Standard R2. The date and time was correct and the server was set to the proper time zone. According to the KB929458, method 2 (Install the most current Microsoft root certificate update) and method 3 (Click to clear the “Check for server certificate revocation” check box) does not apply to Windows Server 2008. After a little bit more research, I found out that my Event viewer (Application) was full of CAPI2 Event id 4110 error

Failed to add certificate to Third-Party Root Certification Authorities store with error: A certificate chain could not be built to a trusted root authority.

Since this error was related to root certificate I went to Http://download.microsoft.com and got the latest update for the root certificate. I download this update, double click on the EXE … nothing happen. Double click again… still nothing. Wierd… I try Windows Update again, everything is fine.

I guess the solution for me was to update the root certificate. I still don’t know what was the cause of that issue or if it was the proper way to fix it but now it works.

Please leave a comment if you had that same issue, this could help us find the cause of this problem.


Skip to comment form

  1. Jens Mueller

    Hi Daniel,
    same thing here…your solution worked for me. We had this issue on a fresh install of Windows 2008 R2.

  2. Clowntrigger

    I was having a problem activating Win2008 server with KMS.
    C:\Windows\System32>cscript slmgr.vbs /ato
    Microsoft (R) Windows Script Host Version 5.7
    Copyright (C) Microsoft Corporation. All rights reserved.

    Activating Windows Server(R), ServerEnterprise edition (*-*-*-*) …
    Run ‘slui.exe 0x2a 0x80072F8F’ to display the error text.
    Error: 0x80072F8F

    I downloaded the latest root cert and it fixed the activation problem. Thanks.

  3. Paul Grevink

    Hello Daniel,

    I have installed several Windows 2008R2 servers without any problems. And then suddenly encountered error 80072f8f while doing a first time update on a new one.
    It is exactly as in your post. Downloading root certificates made it work. You saved my day. Thank you very much.


    Paul Grevink

  4. Dan Fortier

    Hi Paul,

    Same thing for me. Most of my Windows 2008 R2 installation or working no problem, but once in a while I get this issue and the root certificate install fixes it.

    Thanks for the comments.


  5. Kimberly

    To get it to work, I had to download and then right click on it and run as administrator. Then it worked perfectly! Thanks!!

  6. SuperJ

    Hello Daniel,
    Thank you for your post. I had a Win 2000 server give me this same error today, and after reading your solution I downloaded rootsupd.exe (happened to be labeled for Win XP Apr 2012 version), ran it on the server, and viola, now my Windows Updates work.
    Thank you again for taking the time to post this.

  7. John R

    I had the same problem today with a Server 2008 R2, but setting the time corrected my problem.

  8. Marco

    There’s no “root certificate update” available on download.microsoft.com, at least not for “windows 2008″. There’s only one avaiable but is for “Windows XP”. Could someone please provide the direct link of the download for Windows 2008 that fixed this problem ?

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>