Windows Updates Failing

dougietee · 03 Feb 2021

Windows Update Failing - error 0x800F0922: Security Update for Windows 10 Version 1909 for x64-based Systems (KB4535680).

For a few days now I've been unable to get windows update to get beyond trying to install this.

Windows Version (OS Build 18363.1316)

Processor Intel(R) Core(TM) i5-3230M CPU @ 2.60GHz, 2601 Mhz, 2 Core(s), 4 Logical Processor(s)
BIOS Version/Date American Megatrends Inc. P03ABU.139.130226.SK, 26/02/2013
Manufacturer SAMSUNG NP780Z5E-T02UK
I've read a few posts and have done the following which hasn't solved it:

DISM /Online /Cleanup-Image /RestoreHealth

net stop bits
net stop cryptsvc
net stop wuauserv
net stop msiserver
Ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
Ren C:\Windows\System32\catroot2 Catroot2.old
net start bits
net start cryptsvc
net start wuauserv
net start msiserver
I'm not sure if my problem is related to the OEM firmware issue mentioned here:

https://support.microsoft.com/en-us/...7-d0c32ead81e2

The troubleshooter finds nothing wrong.

Tekkie Boy · 03 Feb 2021

Hello

Error Code 0x800f0922 means CBS_E_INSTALLERS_FAILED.
Can you upload the Windows Update logs from the following path?
C:\Windows\logs\CBS

Copy and paste the CBS folder on your desktop, zip it and then upload it on wetransfer.com and share the link here please.

Friendly greetings
Sorry for any mistakes. English is not my native language.

dougietee · 03 Feb 2021

Thank you,

WeTransfer

Tekkie Boy · 03 Feb 2021

Thank you for the log files.

The update fails when the update is trying to update the Secure Boot firmware.
The Access for this is denied.
Here is the extract from the log files.

Code:

2021-01-30 20:34:20, Info                  CSI    0000002c Begin executing advanced installer phase 40 index 5 (sequence 42)    Old component: [l:165 ml:166]'Microsoft-Windows-SecureBoot-FirmwareUpdate, Culture=neutral, Version=10.0.18362.1, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS'    New component: [l:167 ml:168]'Microsoft-Windows-SecureBoot-FirmwareUpdate, Culture=neutral, Version=10.0.18362.411, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS'    Install mode: install    Smart installer: false    Installer ID: {3a4bacaa-c2db-4cf6-8a6b-7d9dfd5155f1}    Installer name: 'Secure Boot Installer'
2021-01-30 20:34:20, Info                  CSI    0000002d Performing 1 operations as follows:  (0)  LockComponentPath: flags: 0 comp: {l:16 b:94849a4947f7d60120000000a42ca832} pathid: {l:16 b:94849a4947f7d60121000000a42ca832} path: [l:117]'\SystemRoot\WinSxS\amd64_microsoft-windows-s..boot-firmwareupdate_31bf3856ad364e35_10.0.18362.1_none_872390f682bad780' pid: 2ca4 starttime: 132565113575560545
2021-01-30 20:34:20, Info                  CSI    0000002e Performing 1 operations as follows:  (0)  LockComponentPath: flags: 0 comp: {l:16 b:ba209b4947f7d60122000000a42ca832} pathid: {l:16 b:ba209b4947f7d60123000000a42ca832} path: [l:119]'\SystemRoot\WinSxS\amd64_microsoft-windows-s..boot-firmwareupdate_31bf3856ad364e35_10.0.18362.411_none_0aba928a9707779d' pid: 2ca4 starttime: 132565113575560545
2021-01-30 20:34:20, Error                 CSI    0000002f@2021/1/30:20:34:20.612 (F) onecore\base\secureboot\servicing\advancedinstaller\securebootai.cpp(277): Error HRESULT_FROM_WIN32(ERROR_ACCESS_DENIED) originated in function Windows::WCP::SecureBoot::BasicInstaller::Install expression: ApplySecureBootUpdate( dwAvailableUpdates)[gle=0x80004005]

My suggestion would be to disable Secure Boot in the laptop's BIOS / Uefi and then try the update again.
If you have installed another antivirus program than Defender, please deactivate it before the update.

Then please give me a feedback.

Good luck

Friendly greetings
Sorry for any mistakes. English is not my native language.

dougietee · 03 Feb 2021

Thanks for the reply. Secure boot is currently not enabled in BIOS.

Tekkie Boy · 04 Feb 2021

Good morning

Thanks for the feedback.
Open the command prompt as administrator and run this command:
dism /online /get-packages /format:table > "%userprofile%\Desktop\Packages.txt"

Then upload the Packages.txt here or on wetransfer and share the link here please.

Friendly greetings
Sorry for any mistakes. English is not my native language.

dougietee · 04 Feb 2021

Packages file should be attached. Packages.txt

Tekkie Boy · 04 Feb 2021

@dougietee

Thanks for the file.
Before I would go through any steps with you.
I would like to ask you to clarify with Samsung in advance whether the Microsoft update is required and has to be installed.
Please download the wushowhide.diagcab from the following website and hide the update for the time being.
http://web.archive.org/web/202101011...owhide.diagcab

Since the direct download link ends with a 404, I generated the link via webarchive.
The file comes from the Microsoft server anyway.

When you have clarified the process with Samsung, ping me.

Friendly greetings

Sorry for any mistakes. English is not my native language.

dougietee · 04 Feb 2021

Samsung were no help really. The agent couldn't answer my question as they don't support this laptop beyond Windows 8.

Having just looked at System Information I noticed:
BIOS Version/Date American Megatrends Inc. P03ABU.139.130226.SK, 26/02/2013
Secure Boot State Off
PCR7 Configuration Binding Not Possible

I'm not sure if this is the issue, but it's referenced in the support article for this update.

Bitlocker is not enabled and there are no group policies enabled for it.

One other thing to mention possibly is that I have a dual boot system - same windows version on both systems.

Tekkie Boy · 05 Feb 2021

dougietee said:

One other thing to mention possibly is that I have a dual boot system - same windows version on both systems.

I understand correctly that you have the same operating system on the Samsung laptop again?