Windows Update Error number: 0x80072F8F

i8iridium · 25th August 2004

Ok, i've had a problem since windows started their new windows update site. I already downloaded SP2 but i've had this problem before installing. I get the error 0x80072F8F: Your computer's date and time appear to be out of sync with an update certificate.

Now my computer is on a network that is synchronized to a GPS clock. I'm behind a Sidewinder firewall and a Bluecoat Proxy. I've been through everything in both of those that i thought could be blocking something, but no dice. I searched this site and the internet and found no resolution, not even from the windows help. Their suggestions didn't help. I'm hoping someone else had this problem and figured it out...

Thanks ahead of time
Pat

Newt · 25th August 2004

Hi i8iridium and welcome.

Is this only an issue with Microsoft updates or the Microsoft Update site?

i8iridium · 25th August 2004

It is a problem with the windows update site.

Newt · 25th August 2004

I'm pretty well clueless on the whole security certificate thing other than some general knowledge. Some other forum regulars are much more conversant with the things and hopefully one will see the thread today and give you a decent answer.

If not, I think this one might be an excellent problem to present to Microsoft Tech Support. I'm guessing it would probably be a free support call.

Welshjim · 25th August 2004

i8iridium--If I do a Google search on 0x80072F8F there are several references, most in foreign languages.
http://www.google.com/search?sourcei...8&q=0x80072F8F
However, one reference eventually leads to something in English

http://216.239.39.104/translate_c?hl...D%26ie%3DUTF-8
Hope this helps.

**JoeHobart** · 26th August 2004

i think jim's link has some good potential. Try this out and report back.

Try this:

Register Softpub.dll
1. Click Start.
2. Choose Run.
3. In the Run box, type regsvr32 SOFTPUB.dll.
4. Click OK.

Newt · 26th August 2004

Thanks Jim / Joe.

Is that a fairly new .dll or do you think it somehow became 'unregistered'?

**dobhar** · 26th August 2004

I also found the same error on the V5 version of Windows Update Troubleshooter unfortunately you have to get to the V5 version in a round about way.

1. Go to Windows Update Page
2. Click on "Frequently asked Questions" in left-hand window
3. In right-hand window click on "Troubleshooting" link. This will move you down the page to Troubleshooting section. You might have to scroll down the window a wee bit more depending on your monitor or resolution. You will see the link to the Windows Update Troubleshooter. (NOTE: You cannot open this page in another window...it has to be opened in the same window for the site to work. If you open in another window the links don't work properly...probably just a bug)

This is what WU Troubleshooter says about the 0x80072F8F error...It goes to confirm what Joe and Jim posted...

Quote:

When searching for available updates on the Windows Update site, you see the 0x80072F8F error while looking for available updates

Problem description
This error may occur if the date and time on your computer varies too much from the valid date and time of the SSL certificates used by the Windows Update site. This causes the scan process to fail. Please verify that your computer’s date and time are accurate.

Applicable operating systems
Windows 2000
Windows XP
Windows Server 2003

Resolutions
1. Check your date and time settings
Click Start.
Click Settings.
Click Control Panel.
Double-click the Date/Time icon.
Set the date and time to the correct values if necessary.

2. Register Softpub.dll
Click Start.
Choose Run.
In the Run box, type regsvr32 SOFTPUB.dll.
Click OK.

V4 Site => http://v4.windowsupdate.microsoft.com/troubleshoot/

Quote:

Originally Posted by Newt

Is that a fairly new .dll

Newt...I don't think it's new to SP2...did a bit of googling on SOFTPUB.dll and there is quite a few hits on this dll. Quite a few of them seem to do with IE not being able to connect to Secure Web Site or Digital Signing Issues with WinXP...I've added a few samples...
- http://support.microsoft.com/?kbid=813442
- http://www.duxcw.com/faq/win/xp/secure.htm

**JoeHobart** · 26th August 2004

Using depends.exe, you can get an idea of what this DLL does, by looking at the exports. Heres a few juicy ones

GenericChainCertificateTrust
GenericChainFinalProv
HTTPSCertificateTrust
FindCertsByIssuer
HTTPSFinalProv
SoftpubAuthenticode
SoftpubCheckCert

Another big clue is using the SDK include headers
//+-----------------------------------------------------------------------// Microsoft Windows
// Copyright (C) Microsoft Corporation, 1996 - 1999
// File: softpub.h
// Contents: Microsoft Internet Security Authenticode Policy Provider

Newt · 26th August 2004

Thanks again guys. Good information.

i8iridium · 26th August 2004

Thanks for all the info. I tried all of the stuff and none of it seemed to work. I'm assuming that it is something to do with the firewall/proxy, as all of the computers on the network get the same error message. I forgot to mention that i am located in South America and am connecting Via a 512kbs satellite connection back to the states. I called back to my wife in the states and she is able to connect to the v5 site with no problems.

I'll have to scan the proxy logs some more and see if there are any tell-tale signs of what is going on. I'm sure i have the needed ports open in the firewall.
If anyone has any more suggestions, i am all ears

again, thanks for the info, guys

Newt · 26th August 2004

I'm tapped out but am guessing someone else has a few more ideas hanging around. Basically posting to ^bump^ this one back to the top.

**JoeHobart** · 27th August 2004

some additional steps to try:

Do this:
regsvr32 Mssip32.dll
regsvr32 Initpki.dll

Then try this:
IE ->tools->options->advanced Unselect 'check for server certificate revocation' reboot and test

Open this file: C:\WINDOWS\SYSTEM32\DRIVERS\ETC\hosts
and nuke any line that has microsoft or akamai on it. (and save that entry to post here for the next guy)

If that doesnt work, collect the c:\windows\Windows Update.log and paste the bottom 50 lines.