Attn Joe Dance Windows Update Error 0x800C0008 after updating the WU client

From: Rob Satterwhite (robsat_at_MICROSOFT.COM)
Date: 01/27/04

  • Next message: Weaver, Colin: "Re: Are you still looking for an excuse to block executable attachments?" 
    Date:         Mon, 26 Jan 2004 19:30:41 -0800
To: NTBUGTRAQ@LISTSERV.NTBUGTRAQ.COM

    Dear Joe,

     

    The 0x800C0008 error can indicate a problem with the SSL connection to
    our servers. We have found that one of the most common causes of the
    problem is the date/time being far enough off that the SSL connection
    will be disallowed. There are a number of other things that have been
    known to cause the problem. In the error page that we present, a
    decision was made to only show the top cause. We do have a
    Troubleshooter article that can be found under the Get Help and support
    link on the site. I have an excerpt from that article below along with a
    little more information.

     

    The file versions that you gave are correct.

     

    Please try the following steps one at a time to see if any of these can
    resolve the problem. Since you indicated that these are newly built
    systems and I could assume that they were built similarly that the first
    suggestion would not apply and you have already tried number 3. To
    assist in helping to troubleshoot this issue please let me know if one
    of these suggestions can resolve the problem.

     

    Thank you,

    Rob Satterwhite

    Windows Update Support Mgr

     

     

    Suggestion 1:

     

    Temporarily disabling antivirus and firewall programs while you use
    Windows Update may solve this problem. Be sure to enable them again when
    you complete the update process. Some customers have also resolved this
    issue by disabling or uninstalling Internet acceleration software.

     

    Suggestion 2:

     

    The error may occur because the language-setting in Internet Explorer is
    missing. To add a language, in Internet Explorer, select
    Tools-->Internet Options, and click the "Languages" button. Add a
    language to the list if empty.

     

    Suggestion 3:

     

    Check the system time. SSL will not function if the system time is more
    than 100 days off.

     

    Check your date and time setting by following these steps:

     

    1. Click on Start, Settings, Control Panel.

    2. Open the Date/Time item.

    3. Verify that you have the correct date and time configured on your PC

     

    Suggestion 4:

     

    Double-check a few settings in IE.

     

    1. In IE, click on Tools, and select Internet Options from the
    drop-down menu..

    2. Click on the Security tab. Verify that the Internet Zone is
    selected and then click the Custom Level button.

    3. Under the ActiveX controls and plug-ins section make sure that you
    have either "Enable" or "Prompt" set for these items:

          a. Download signed ActiveX controls

          b. Run ActiveX controls and plug-ins

          c. Script ActiveX controls marked safe for scripting

    4. Click on the Content tab and click the Certificates button.

    5. Select the Trusted Root Certification Authorities tab.

    6. Check for a certificate called "Microsoft Root Authority".

    7. Double-click on it to open it's properties.

    8. On the General tab, make sure that the Valid from dates are correct.
    It should be "1/10/1997 to 12/31/2020"

    9. On the Certification Path tab, under the Certificate Status section,
    make sure it says "This certificate is OK."

    10. Click OK, and now find a certificate called "NO LIABILITY
    ACCEPTED".

    11. On the General tab, make sure that the Valid from dates are
    correct. It should be "5/11/1997 to 1/7/2004"

    12. On the Certification Path tab, under the Certificate Status
    section, make sure it says "This certificate is OK." Click OK. Click
    the Close button.

    13. Click Ok, and now find a certificate called "GTE CyberTrust Root".
    You may have more than one of these with the same name. You need to
    check the one that has an Expiration date of 2/23/2006.

    14. On the General tab, make sure that the Valid from dates are
    correct. It should be "2/23/1996 to 2/23/2006"

    15. On the Certification Path tab, under the Certificate Status
    section, make sure it says "This certificate is OK."

    16. Next, click on the Advanced tab.

    17. Scroll down the list and make sure there are check marks in the
    boxes next to:

          a. Use HTTP 1.1

          b. Use SSL 2.0

          c. Use SSL 3.0

    18. Close all open browsers, then connect to the Windows Update site
    and see if it works.

     

    Suggestion 5:

     

    Please disable the options to check for certificate revocation in
    Internet Explorer:

     

    1. Open Internet Explorer

    2. Click "Tools."

    3. Click "Internet Options" from the drop down menu.

    4. Click the "Advanced" tab.

    5. Scroll down to the Security Section.

    6. Unselect "Check for publisher's certificate revocation."

    7. Unselect "Check for server certificate revocation."

    8. Click OK.

    9. Close all Internet Explorer windows, and try Windows Update again.

     

    Suggestion 6:

     

    You might also be able to resolve this issue by deleting all of the
    content in Program Files\Windowsupdate and Program
    Files\Windowsupdate\V4 except for the iuhist.xml file located in Program
    Files\Windowsupdate\V4.

     

    Suggestion 7:

     

    One customer performed an MSN Messenger update, which fixed his
    0x800c0008 Windows Update issue as well. Correlation not yet determined
    but an avenue to check if you have MSN Messenger installed.

    -----
    NTBugtraq Editor's Note:

    I'm looking for an event at which I can speak in Australia, specifically near Brisbase, as close to Christmas as possible. Anyone interested in flying me down under at that time, please contact me at Russ.Cooper@rc.on.ca
    -----

  • Next message: Weaver, Colin: "Re: Are you still looking for an excuse to block executable attachments?"