[SOLVED] Unable to update Server 2019 VM

[r2grevio]

Hi,

I have a Windows 2019 Server which is failing to install Security update for Windows KB5044277 - 2024-10 Cumulative Update for Windows Server 2019 for x64-based Systems.

The update appears to install correctly but after the reboot during configuring updates screen - it gets to 90-99% and then the message states "We couldn't complete the updates Undoing changes Don't turn off your computer".

This is the error I see in the ReportingEvents.log

{531E1ED1-47AB-4885-9EF3-9442AC2C3738} 2024-10-11 08:03:42:256+0100 1 182 [AGENT_INSTALLING_FAILED] 101 {3B4D026D-8AAB-4413-8EE0-5C2C8FB051D6} 200 800f0922 <<PROCESS>>: cscript.exe Failure Content Install
Installation Failure: Windows failed to install the following update with error 0x800f0922: 2024-10 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5044277). kR6yjmgbI0ujTBp3.3.0.0.4.1.0.0

So far I have tried:

1) Empty the Software Distribution and catroot2 folders
2) Installing from our network WSUS server
3) Downloading the .msu from MS Catalog and installing directly
4) SFC /scannow and DISM /Online /Cleanup-Image /RestoreHealth - no issues running either
5) Adding 20GB to the disk - the VM already showed 50GB free but I read somewhere that this issue was related to disk space
6) Running SFC and DISM from the RE. i.e. sfc /scannow /offbootdir=F:\ /offwindir=F:\windows and DISM /image:F: /Cleanup-Image /RestoreHealth /Source:D:\sources\install.wim /ScratchDir:F:\temp

Super grateful for any help you can offer.

Thanks

 

[Maxstar]

2024-10-16 13:35:35, Error                 CSI    0000081e (F) Installer: HTTP Installer	Binary Name: httpai.dll	ErrorCode: 800703f1	Phase: 38	Mode: Install (upgrade)	Component: Microsoft-Windows-TerminalServices-RemoteConnectionManager, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS[gle=0x80004005]
2024-10-16 13:35:35, Info                  CSI    0000081f ==Error Summary End==
2024-10-16 13:35:35, Error                 CBS    Startup: Failed to process advanced operation queue, startupPhase: 0.  A rollback transaction will be created. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]

Hi and welcome to Sysnative,

Please provide the following files:

Upload your DRIVERS Hive

• Navigate to C:\Windows\System32\config and locate the DRIVERS file.
• Please copy this file to your desktop.
• Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
• Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named DRIVERS.ZIP on your desktop.
• If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.

Upload the SCHEMA.DAT file

• Navigate to C:\Windows\System32\SMI\Store\Machine and copy the SCHEMA.DAT file to your desktop.
• Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named SCHEMA.ZIP on your desktop.
• Attach this ZIP-file to your next reply.

 

[r2grevio]

Hi,

Please find attached files as requested.

 

[Maxstar]

Both ZIP-files are corrupted, please upload them again as well as to WeTransfer | Send Large Files Fast - Up To 2GB Free and share the link here.

 

[r2grevio]

Oh sorry about that. Hopefully this is better

SCHEMA.zip

 

[Maxstar]

Hi,

Upload the Event Viewer logs.

• Click the Start button and in the search box, type Command Prompt
• When you see Command Prompt on the list, right-click on it and select Run as administrator.
  Copy and paste the following commands one at a time into the command prompt and press enter after each.
  

  wevtutil epl SYSTEM "%userprofile%\Desktop\System.evt"
  wevtutil epl APPLICATION "%userprofile%\Desktop\Application.evt"
  PowerShell Compress-Archive -Path "%userprofile%\Desktop\*.evt" -DestinationPath "%UserProfile%\Desktop\EventLogs.zip"

• These commands will collect the System and Application logs and create EventsLogs.zip on your Desktop.
• Attach this file in your next reply.

 

[r2grevio]

Hi,

A couple of web bindings to old and non-existent SSL certs were preventing the http service from starting. I was able to fix by removing the offending keys manually from HKLM:\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo\ and rebooting. I ran the update again and this time it installed successfully .

Thank you so much for your time, really appreciate it.

Cheers

 

[Maxstar]

Hi,

You're welcome! Are you abe to provide an export of this key from a backup of the SYSTEM hive to look at?

2024-10-16 13:35:35, Error CSI 0000081e (F) Installer: HTTP Installer Binary Name: httpai.dll ErrorCode: 800703f1    Phase: 38    Mode: Install (upgrade)    Component: Microsoft-Windows-TerminalServices-RemoteConnectionManager, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS[gle=0x80004005]

This because error 0x800703f1 refers to an corrupt database which is used by: Microsoft-Windows-TerminalServices-RemoteConnectionManager, so I wonder if it's related to a file inside "%WinDir%\System32\lserver"

 

[r2grevio]

Is this what you mean? I mounted the SYSTEM hive from RegBack and exported the whole http key.... let me know if I misunderstood.

I've also attached the event we were seeing as the http service failed to start. This also states "The configuration registry database is corrupt." I just assumed that was referring to the erroneous web bindings.

There is no 'lserver' directory, but this isn't an RDS server it is a Service Fabric node.

 

[Maxstar]

Yes, thanks for sharing! The event-log shows the same: "Error 10/19/2024 2:36:02 PM Service Control Manager 7000 None"

The HTTP Service service failed to start due to the following error: 
The configuration registry database is corrupt.

The following command should have reported the same error:

C:\WINDOWS\system32>net start http
System error 1009 has occurred.

The configuration registry database is corrupt.

I assume you have removed all 0.0.0.0:xxxxx subkeys!

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo\0.0.0.0:19081]