Several Windows Update Fails - KB4493132 and KB4512506 with 80092004

UPDATE 2:

Had another go at installing SURT.

Did nothing for approx 40 mins (I then went off to drill some holes in a wall)

I came back to the message "Installation Complete" (and my stopwatch said 1h 29mins).

So KB947821 is now installed.

Zaph

OK ZaphodB,
So, you ran the System Update Readiness Tool (SURT) nice
The CheckSUR.log shows no errors, nice.
Now perusal of your WindowsUpdate.log & CBS.log is in order, & I will do so in the next few hours after fyou upload them.
Need C:\Windows\CBS folder & C:\Windows\Windowsupdate.log please
Bill

Hi Snick,

The WHOLE of the CBS Folder??

I presume the paths are

C:\Windows\Logs\CBS

and

C:\Windows\Logs\WindowsUpdate

However, there is NO Windows Update log in the c:\Windows\Logs folder

Zaph

Metallica, sometimes that works, not usually, but glad to hear your issue is resolved.
ZaphodB, CBS folder C:\Windows\Logs\CBS
WindowsUpdate.log C:\Windows\WindowsUpdate.log
Location correct! Clear?
Not good if they are missing!

Bill

Snick said:

Metallica, sometimes that works, not usually, but glad to hear your issue is resolved.
ZaphodB, CBS folder C:\Windows\Logs\CBS
WindowsUpdate.log C:\Windows\WindowsUpdate.log
Location correct! Clear?
Not good if they are missing!

Bill

Bill,

I appreciate the time you are taking to try to help me resolve the problem I am experiencing but do your posts have to be so aggressive?

You may not intend this but that's how I am perceiving them.

e.g. Post #11 this thread

Restart your computer (DUH) and try SURT64 again!

It is a windows update after all correct! (DUH AGAIN)

and again in post #26 when you say:

CBS folder C:\Windows\Logs\CBS
WindowsUpdate.log C:\Windows\WindowsUpdate.log
Location correct! Clear?
Not good if they are missing!

In post #23 you appeared to ask me to post the whole of the C:\Windows\CBS folder
and I asked for clarification.

The bits that are coming across as agressive are highlighted in red above.

If you didn't mean to come across that way, you may wish to re-read your submissions before
hitting the 'Submit Reply' button.

If you did intend them in that way ...

Zaph

Okay ...

So I think I may have found out why these updates are failing and why.

The following information is copied from ghacks.net.

Link to webpage: https://www.ghacks.net/2019/08/15/if...08-r2-do-this/

If you get Windows Update error 0x80092004 on Windows 7 or Server 2008 R2 do this by Martin Brinkmann on August 15, 2019

Microsoft released updates for all supported versions of Windows -- client and server -- on the August 2019 Patch Day.

Reports suggest that some administrators and home users face issues with the released updates on machines running Windows 7 or Windows Server 2008 R2.

Attempts to install the updates KB4512506 (monthly rollup update) or KB4512486 (security-only update) fail with the error 0x80092004. The error associated with the error code, CRYPT_E_NOT_FOUND, suggests that Windows Update rejects the updates because cryptographic values that the update packages contain are not found.

Microsoft revealed that certain Symantec and Norton software installed on Windows 7 or Windows Server 2008 R2 systems does not play nice with the change and Microsoft made the decision to block updates on machines running Symantec and Norton software until the issue is resolved. The security solutions may block or delete Windows Updates.

While it is possible that the issue is related, e.g. that other antivirus solutions are causing issues with Windows Updates as well, it is more likely that a required update is missing.

Two updates need to be installed on Windows 7 and Windows Server 2008 R2 systems so that SHA-2 signed updates are installed correctly:

KB4474419 -- SHA-2 code signing support update for Windows Server 2008 R2, Windows 7, and Windows Server 2008: August 13, 2019

KB4490628 -- Servicing stack update for Windows 7 SP1 and Windows Server 2008 R2 SP1: March 12, 2019

If one of these is not installed, SHA-2 signed updates won't be accepted and the error is thrown instead.

Microsoft confirms that KB4474419 is a prerequisite on the support website. The company lists KB4490628 on the page as well stating that it strongly recommends that it is updated. SSU updates are installed automatically if Windows Updates is used but need to be installed manually if updates are installed manually. It is unclear why Microsoft does not list the SSU as a prerequisite more clearly.

You can verify that these updates are installed by checking the "Installed Updates" listing in the Control Panel or by running third-party software such as Nirsoft's WinUpdatesList.

If at least one of the updates is not installed, install it on the device and run a new check for updates after installation; the August 2019 update should install just fine this time.

In my particular case the KB4474419 was installed but KB4490628 wasn't (and as the info above says, you need both - hence the failure.)

I have installed the missing update (KB4490628) now and trying again with those updates that had previously failed.

I'll update this thread with the results in due course.

Zaph

UPDATE: Successful!

The previous updates which (repeatedly) failed were:

KB 4512514
KB 947821
KB 4493132
KB 4512506

and after installing KB 4490628 (see my post #28 above, this thread)

KB 4493132
KB 4512506
and
KB 4512514

installed without any problems after I installed KB4490628 (KB4474419 was already installed) apart from getting the "0KB total, 0% complete" message for a long time - the updates eventually installed).

Happy to mark this now as 'Solved'.

Thanks to all those folks who gave their time and offered their suggestions/advice in trying to help me - even those whose comments are a bit 'barbed'.

Zaph

Thanks Metallica

Wasn't going to let it beat me.

Z