SCEP for Windows Server 2008 Standard no longer updating

Brett Duncan 111

Yes it's old and no it won't be upgraded anytime soon..
Anyways Server 2008 Standard with SCEP 4.10.209.0. Event id 20, 2003, 2001 in System Event log.

Installation Failure: Windows failed to install the following update with error 0x80070643: Security Intelligence Update for Microsoft Endpoint Protection - KB2461484 (Version 1.323.201.0). Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: 1.1.17400.5 Previous Engine Version: Engine Type: Antimalware User: ************** Error Code: 0x8007007f Error description: The specified procedure could not be found.

Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: 1.323.188.0 Previous Signature Version: Update Source: User Update Stage: Install Source Path: Signature Type: AntiSpyware Update Type: Full User: ************ Current Engine Version: 1.1.17400.5 Previous Engine Version: Error code: 0x8007007f

Detail of each of the above events ids respectively.

Software distribution folder renamed etc and SCEP uninstalled restarted and installed again same issue.

Anyone else with the same issue in the last 6 days ?

dannyb54 1 Reputation point

2020-09-08T14:36:25.823+00:00

Any lucky with this? experiencing the same issue with 2008 Standard, R2 member servers have updated fine... standard has constant failed scep update within software centre
Ben K 111 Reputation points

2020-09-15T23:03:04.563+00:00

Worked with Microsoft support and found a solution. Its posted in the answers below.
pdog123 1 Reputation point

2020-09-17T14:01:40.073+00:00

Has anyone verified this dll worked and that this is indeed a official fix?
pdog123 1 Reputation point

2020-09-17T14:02:10.54+00:00

Has anyone verified BenK-9145's dll worked and that this is indeed a official fix?
pdog123 1 Reputation point

2020-09-17T14:28:40.97+00:00

I used BenKs fix, it worked.

Accepted answer

Brett Duncan 111 Reputation points

2020-09-02T01:02:58.407+00:00

I'm assuming anyone can install the "2020-02 Extended Security Updates (ESU) Licensing Preparation Package for Windows Server 2008 for x86-based Systems (KB4538484)" update but whether the License on the server actually permits it or not.

How can I tell if the license has been extended by the customer ?
Please sign in to rate this answer.
Joy Qiao 4,886 Reputation points Microsoft Employee

2020-09-02T09:42:43.13+00:00

Hi,

Thank you for your actions and provide detailed information about what you did.
We could run command line "slmgr /dlv" as administrator to check the license type. You could also post it here and hide personal data before upload capture.

Bests,

Brett Duncan 111 Reputation points

2020-09-02T19:15:22.407+00:00

Which part of the information do you require and i will post it ?

Brett Duncan 111 Reputation points

2020-09-02T19:16:15.293+00:00

here's a small snippet from top!

22303-image.png

Joy Qiao 4,886 Reputation points Microsoft Employee

2020-09-03T08:32:16.503+00:00

Hi,

Seems like you have not brought ESU product key.
Here is the capture which have brought and activated with ESU key.

Brett Duncan 111 Reputation points

2020-09-03T19:02:54.99+00:00

Thankyou JoyQiao.

I will advise the different customers that they have not bought the Extended License.

Muhammad Zeeshan Afzal 1 Reputation point

2020-09-09T09:34:33.073+00:00

Is there any official document from Microsoft where they mentioned that SCEP updates are no longer available for Windows Server 2008? and you need to buy ESU for that? I am unable to find any. Please share if you have any.

dannyb54 1 Reputation point

2020-09-09T10:04:18.203+00:00

Struggling to find this as well

Ben K 111 Reputation points

2020-09-15T20:24:18.847+00:00

FYI, my servers do not show the ESU info on this screen either, but after working with Microsoft and applying their patch, the definitions are updating again as expected.
Sign in to comment

14 additional answers

Ben K 111 Reputation points

2020-09-15T20:30:16.113+00:00

Microsoft has given me a fix for this issue. It is caused by the main dll giving issues. Sounds like an update broke it and you can't update it normally to fix it.

Below is a file with a x86 and x64 version of the dll. You just need to drop the .dll file in the following folder on each server that is affected

C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Updates

Give it a few minutes and you'll see the file disappear. After that you can click update and it should download and install the updates as expected.

https://1drv.ms/u/s!Au-Zzno5A68hhNlk7RhmxzFrjJhDeA?e=jFjgyp
Please sign in to rate this answer.

1 person found this answer helpful.
mightymidget 1 Reputation point

2020-09-16T17:41:16.823+00:00

is there an official Microsoft source for this DLL? I'm sure if genuine you'll understand my reason for asking.

pdog123 1 Reputation point

2020-09-17T13:58:03.033+00:00

Yes can anyone from MSFT certify this? I have servers that are almost out of disk space because of this issue. Can I delete the definition updates that have failed until this fix is installed?

Ben K 111 Reputation points

2020-09-17T14:04:33.557+00:00

II was given these files through a onedrive link from Microsoft. Thats all I can provide. They did say a full patch would be coming soon though. No ETA yet from them on that though.

pdog123 1 Reputation point

2020-09-17T14:29:09.457+00:00

So far so good Ben. I had to remove the old update files manually. They were taking up like 8gb of space. Thanks.

dannyb54 1 Reputation point

2020-09-17T14:30:37.003+00:00

Looking good so far, thanks for the follow up! :)

Ben K 111 Reputation points

2020-09-17T14:32:14.54+00:00

Another Note, Don't un-install the SCEP client, and re-install as a troubleshooting step. The one I did that on won't update, even with this fix applied. Microsoft is still researching that one and might end up having to wait for a fully published fix or a new installer with the fix included.

Riley Foster 1 Reputation point

2020-09-17T15:37:50.977+00:00

Yes - I have a server on which SCEP was just installed for the first time and it won't update at all - even with the updated .DLL.

Ben K 111 Reputation points

2020-09-17T15:40:32.837+00:00

I'll update when I have a fix from Microsoft on that issue.

S.G.88 1 Reputation point

2020-09-18T13:59:48.95+00:00

I'm having the same issue with multiple server 2008 SP2 servers. Tried the fix described by BenK. I copy the file to the mentioned folder. After a minute the file is gone, but SCEP still does not update. :(
Did notice while manually deleting the downloaded defenition updates, I am not able to remove 1 mpengine.dll file: created 8/27/2020, version: 1.1.17300.4

Ben K 111 Reputation points

2020-09-18T14:12:25.26+00:00

Verify you're using the right .dll file. There are separate ones for x86 and x64.
Also, if you don't have definitions at all, it doesn't seem to want to work and Microsoft is still investigating that.

S.G.88 1 Reputation point

2020-09-18T14:29:34.197+00:00

Thanks for the reply!
I'm using the x64 file on a 64-bit server. SCEP is not freshly installed. So it does have older definitions. Updates started failing on 08/30/2020. Latest succesfull definition update was on 08/27.

Ben K 111 Reputation points

2020-09-18T14:43:04.61+00:00

Gotcha. Sounds like you'll need to just wait for a complete patch like I am for the 1 server it hasn't worked for. I have a feeling a new client version install will be coming out.

Venkatesh S 1 Reputation point

2020-10-29T10:03:14.067+00:00

Hello Ben-K,

Warm greetings.

We have performed these steps during September month and got fixed but once again we have been facing this issue again. We have performed all the steps provided by you. But not getting updated.

Note: We tried updating manually as well but no luck.

Ben K 111 Reputation points

2020-10-29T12:29:54.493+00:00

Unfortunately this fix isn't working this time around. Microsoft has messed this up again. There is a new thread to follow the progress of a new fix at this link:
https://learn.microsoft.com/en-us/answers/questions/141255/scep-update-error-0x800700c1-on-windows-server-200.html
Sign in to comment
Brett Duncan 111 Reputation points

2020-08-30T23:41:03.463+00:00

PS. This is across a number of customers we look after and not just one Server at this stage all the same spec 2008 standard and SCEP 4.10.209.0.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Joy Qiao 4,886 Reputation points Microsoft Employee

2020-08-31T09:04:29.647+00:00

Hi,

I noticed you tried to install update package KB2461484 (Version 1.323.201.0) which is replaced by KB2461484 (Version 1.323.237.0) as Windows Update Catalog shows. So please check if the issue occur when download and install KB2461484 (Version 1.323.237.0) manually through Windows Update Catalog.

If the issue persists, please try to run the following command line as administrator.

Sfc /scannow

also please run the command line below or reset Windows Update with script:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
Ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

Bests,
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Brett Duncan 111 Reputation points

2020-08-31T22:45:31.43+00:00

Ran Sfc /scannow which found issues and fixed.

Tried the script and restarted and still not working.

We have 16 servers which are all 2008 Standard across 4 different customers with the same issue.

Going to start from scratch again and Uninstall SCEP.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment