Windows Update Error number: 0x80072F8F

Ok, i've had a problem since windows started their new windows update site. I already downloaded SP2 but i've had this problem before installing. I get the error 0x80072F8F: Your computer's date and time appear to be out of sync with an update certificate.

Now my computer is on a network that is synchronized to a GPS clock. I'm behind a Sidewinder firewall and a Bluecoat Proxy. I've been through everything in both of those that i thought could be blocking something, but no dice. I searched this site and the internet and found no resolution, not even from the windows help. Their suggestions didn't help. I'm hoping someone else had this problem and figured it out...

Thanks ahead of time
Pat

 

Hi i8iridium and welcome.

Is this only an issue with Microsoft updates or the Microsoft Update site?

 

It is a problem with the windows update site.

 

I'm pretty well clueless on the whole security certificate thing other than some general knowledge. Some other forum regulars are much more conversant with the things and hopefully one will see the thread today and give you a decent answer.

If not, I think this one might be an excellent problem to present to Microsoft Tech Support. I'm guessing it would probably be a free support call.

 

i8iridium--If I do a Google search on 0x80072F8F there are several references, most in foreign languages.
http://www.google.com/search?sourceid=navclient&ie=UTF-8&q=0x80072F8F
However, one reference eventually leads to something in English

http://216.239.39.104/translate_c?h...&prev=/search?q=0x80072F8F&hl=en&lr=&ie=UTF-8
Hope this helps.

 

i think jim's link has some good potential. Try this out and report back.

Try this:

Register Softpub.dll
1. Click Start.
2. Choose Run.
3. In the Run box, type regsvr32 SOFTPUB.dll.
4. Click OK.

 

Thanks Jim / Joe.

Is that a fairly new .dll or do you think it somehow became 'unregistered'?

 

I also found the same error on the V5 version of Windows Update Troubleshooter unfortunately you have to get to the V5 version in a round about way.

1. Go to Windows Update Page
2. Click on "Frequently asked Questions" in left-hand window
3. In right-hand window click on "Troubleshooting" link. This will move you down the page to Troubleshooting section. You might have to scroll down the window a wee bit more depending on your monitor or resolution. You will see the link to the Windows Update Troubleshooter. (NOTE: You cannot open this page in another window...it has to be opened in the same window for the site to work. If you open in another window the links don't work properly...probably just a bug)

This is what WU Troubleshooter says about the 0x80072F8F error...It goes to confirm what Joe and Jim posted...

V4 Site => http://v4.windowsupdate.microsoft.com/troubleshoot/

Newt...I don't think it's new to SP2...did a bit of googling on SOFTPUB.dll and there is quite a few hits on this dll. Quite a few of them seem to do with IE not being able to connect to Secure Web Site or Digital Signing Issues with WinXP...I've added a few samples...
- http://support.microsoft.com/?kbid=813442
- http://www.duxcw.com/faq/win/xp/secure.htm

 

Using depends.exe, you can get an idea of what this DLL does, by looking at the exports. Heres a few juicy ones

GenericChainCertificateTrust
GenericChainFinalProv
HTTPSCertificateTrust
FindCertsByIssuer
HTTPSFinalProv
SoftpubAuthenticode
SoftpubCheckCert

Another big clue is using the SDK include headers
//+-----------------------------------------------------------------------// Microsoft Windows
// Copyright (C) Microsoft Corporation, 1996 - 1999
// File: softpub.h
// Contents: Microsoft Internet Security Authenticode Policy Provider

 

Thanks again guys. Good information.

 

Thanks for all the info. I tried all of the stuff and none of it seemed to work. I'm assuming that it is something to do with the firewall/proxy, as all of the computers on the network get the same error message. I forgot to mention that i am located in South America and am connecting Via a 512kbs satellite connection back to the states. I called back to my wife in the states and she is able to connect to the v5 site with no problems. I'll have to scan the proxy logs some more and see if there are any tell-tale signs of what is going on. I'm sure i have the needed ports open in the firewall.
If anyone has any more suggestions, i am all ears
again, thanks for the info, guys

 

I'm tapped out but am guessing someone else has a few more ideas hanging around. Basically posting to ^bump^ this one back to the top.

 

some additional steps to try:

Do this:
regsvr32 Mssip32.dll
regsvr32 Initpki.dll


Then try this:
IE ->tools->options->advanced Unselect 'check for server certificate revocation' reboot and test

Open this file: C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
and nuke any line that has microsoft or akamai on it. (and save that entry to post here for the next guy)




If that doesnt work, collect the c:\windows\Windows Update.log and paste the bottom 50 lines.