Windows update broken | Windows Server 2019

[heckles04]

Error code: 0x80070422

What we tried:

• all the basic troubleshoot steps.
• we tried to fix the Cryptographic services with MS Support.
• Install update manualy

 

[Windows Update Bot]

Hi @heckles04,

Welcome to Sysnative Forums!

If you haven't already, please review the posting instructions here, and attach the requested log files. Without log files, our helpers will not be able to assist, and this will slow down fixing your machine.

If logs have been already been provided, our team of volunteers will analyse the provided log files to build a fix for your system. Please be aware that this may take several days from your initial post, due to the high volume of threads that we receive.


- Sysnative Windows Update Team

 

[Maxstar]

Hi and welcome to Sysnative,

Export registry key as hive file and the Services list as *.txt file

• Open the Start menu of Windows and type CMD.
• When you see Command Prompt on the list, select the option Run as administrator.
• Copy and paste the following commands into the command prompt and press enter.

reg save "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services" "%userprofile%\Desktop\Services.hiv"
WMIC SERVICE GET caption, name, startmode, state > "%userprofile%\desktop\services.txt"

• Zip Services.hiv and Services.txt file and attach it to your next reply.

 

[heckles04]

Hi Maxstar,

I just collected the requested files.

 

[Maxstar]

Hi,

The Cryptographic Services is set to auto and running, so please attempt to update again and provide the latest CBS logs.

 

[heckles04]

Hi,

I attached the cbs logs.

 

[Maxstar]

Hi,

Note: The following fix will trigger a restart, if you cannot restart during working hours perform this fix later.

Download the

Farbar Recovery Scan Tool and save it to your Desktop:

Download the 64 bit version: - Farbar Recovery Scan Tool Link

Warning: This script was written specifically for this system. Do not run this script on another system.

• Download the attachment fixlist.txt and save it to your desktop.
• Right-click on FRST.exe and select "Run as administrator".
• Press the Fix button.
• If for some reason the tool needs a restart, please make sure you let the system restart normally.
• When finished, a log called Fixlog.txt will appear in the same directory the tool is run from.
• Post the logfile Fixlog.txt as attachment in your next reply.

 

[heckles04]

Hi,

After is start the frst.exe the app(run as admin) try to backup registry then it's crash.
So i wasn't able to do the fix.

 

[Maxstar]

What message appeared or closed FRST immediately when you hit the Fix button?

 

[heckles04]

It closed before i had a chance to press the fix button.
I tried it several times.

 

[Maxstar]

Which security software is installed, maybe FRST was blocked because it's not digitally signed.

 

[heckles04]

yes. in the meantime my sec team conntacted my because or AV SW alerted them because of this SW.
"Analysis of the detection shows this to be the legitimate tool 'Farbar Recovery Scan Tool'. "

They will allow it soon. when it's done i'll got back to you with the resoults.

 

[Maxstar]

Great, let me know the result when the tool is whitelisted. FYI you can find the public tutorial here: FRST Tutorial - How to use Farbar Recovery Scan Tool - FRST Tutorial

 

[heckles04]

Hi,

After the fix i got the following erros:

2025-01 Cumulative Update for .NET Framework 3.5, 4.7.2 and 4.8 for Windows Server 2019 for x64 (KB5050182) - Error 0x80071a91
2025-03 Cumulative Update for Windows Server 2019 for x64-based Systems (KB5053596) - Error 0x80071a91

 

[Maxstar]

Hi,

Please provide the log file of FRST (Fixlog.txt) and the latest CBS logs.

 

[heckles04]

Hi,I attached the files.

 

[Maxstar]

Please run the following commands in an elevated prompt and post the result.

attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\*
del %SystemRoot%\System32\SMI\Store\Machine\*.tm*
del %SystemRoot%\System32\SMI\Store\Machine\*.blf
del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms

 

[heckles04]

C:\Users\csekrohu_aa\Desktop>attrib -r -s -h %SystemRoot%\System32\SMI\Store\Machine\*

C:\Users\csekrohu_aa\Desktop>del %SystemRoot%\System32\SMI\Store\Machine\*.tm*

C:\Users\csekrohu_aa\Desktop>del %SystemRoot%\System32\SMI\Store\Machine\*.blf
Could Not Find C:\windows\System32\SMI\Store\Machine\*.blf

C:\Users\csekrohu_aa\Desktop>del %SystemRoot%\System32\SMI\Store\Machine\*.regtrans-ms
Could Not Find C:\windows\System32\SMI\Store\Machine\*.regtrans-ms

C:\Users\csekrohu_aa\Desktop>

 

[Maxstar]

Please take a screenshot of the folder: %SystemRoot%\System32\SMI\Store\Machine - do the same for: %SystemRoot%\System32\Config\TxR

 

[heckles04]

Done.