Azure VM running windows 2019 unable to update getting errors

Question

Hi All.

Currently investigating why a windows 2019 server, configured to automatically update does not work. The VM is hosted in Azure, however I can see the following errors whenever the auto update tries to start.

Assessment failed due to this reason: "2 errors reported. The latest 3 errors are shared in details. To view all errors, review this log file on the machine:[C:\WindowsAzure\Logs\Plugins\Microsoft.CPlat.Core.WindowsPatchExtension\1.5.59]
"["Windows update API failed to assess the machine for available updates. Error:Exception from HRESULT: 0x80072EFE, Hresult:0"    at UpdateManagementAction.concrete.UpdateAssessment.GetAvailableUpdates()
   at UpdateManagementAction.concrete.AssessmentAction.Assess(UpdateManagementResultSummary updateActionResultSummary)]."
"["Windows update API failed to assess the machine for available updates. Error:Exception from HRESULT: 0x80072EFE, Hresult:0"    at UpdateManagementAction.concrete.UpdateAssessment.GetAvailableUpdates()
   at UpdateManagementAction.concrete.AssessmentAction.Assess(UpdateManagementResultSummary updateActionResultSummary)]."
   

Looking at the log files, I can see the following details.

[10188+00000001] 2023-12-21T22:15:02.9136215Z [Error] Windows Update API exceeded the max retry count assessing for updates with retriable error. Exiting after exceeding the [MaxRetryCount=4]. [ActivityId=f8a7cf0c-c28e-45f0-b365-477f95615e65][MachineName=azsdevinf001]][ErrorMessage=Exception from HRESULT: 0x80072EFE][HResult=0][RetryCount=4]
[10188+00000001] 2023-12-21T22:15:02.9240238Z [Info] Assessment failed: [ActivityId=f8a7cf0c-c28e-45f0-b365-477f95615e65][Operation=Assessing][ExceptionMessage="Windows update API failed to assess the machine for available updates. Error:Exception from HRESULT: 0x80072EFE, Hresult:0"][StackTrace=   at UpdateManagementAction.concrete.UpdateAssessment.WindowsUpdateSearch(IUpdateSearcher searcher, String searchCriteria, String machineName, String logEventName, Int32& retryCount)
   at UpdateManagementAction.concrete.UpdateAssessment.GetAvailableUpdates()]

[10188+00000001] 2023-12-19T22:15:02.9136215Z [Error] Windows Update API exceeded the max retry count assessing for updates with retriable error. Exiting after exceeding the [MaxRetryCount=4]. [ActivityId=f8a7cf0c-c28e-45f0-b365-477f95615e65][MachineName=azsdevinf001]][ErrorMessage=Exception from HRESULT: 0x80072EFE][HResult=0][RetryCount=4]
[10188+00000001] 2023-12-19T22:15:02.9240238Z [Info] Assessment failed: [ActivityId=f8a7cf0c-c28e-45f0-b365-477f95615e65][Operation=Assessing][ExceptionMessage="Windows update API failed to assess the machine for available updates. Error:Exception from HRESULT: 0x80072EFE, Hresult:0"][StackTrace=   at UpdateManagementAction.concrete.UpdateAssessment.WindowsUpdateSearch(IUpdateSearcher searcher, String searchCriteria, String machineName, String logEventName, Int32& retryCount)
   at UpdateManagementAction.concrete.UpdateAssessment.GetAvailableUpdates()]

[10188+00000001] 2023-12-19T22:15:02.9552963Z [Info] Assessment failed: [ActivityId=f8a7cf0c-c28e-45f0-b365-477f95615e65][Operation=Assessing][ExceptionMessage="Windows update API failed to assess the machine for available updates. Error:Exception from HRESULT: 0x80072EFE, Hresult:0"][StackTrace=   at UpdateManagementAction.concrete.UpdateAssessment.GetAvailableUpdates()
   at UpdateManagementAction.concrete.AssessmentAction.Assess(UpdateManagementResultSummary updateActionResultSummary)]
[10188+00000001] 2023-12-19T22:15:02.9552963Z [Verbose] Error message for assessment was added to error object. [OperationType=Assessment][ErrorMessage="Windows update API failed to assess the machine for available updates. Error:Exception from HRESULT: 0x80072EFE, Hresult:0"    at UpdateManagementAction.concrete.UpdateAssessment.GetAvailableUpdates()
   at UpdateManagementAction.concrete.AssessmentAction.Assess(UpdateManagementResultSummary updateActionResultSummary)][AssessmentErrorCount=1][ActivityId=f8a7cf0c-c28e-45f0-b365-477f95615e65]

Answer 1

Hi @MrFlinstone ,
Thanks for contacting Microsoft Q&A platform.
I’m sorry to hear that you’re having trouble with Windows Update. I’m sorry to hear that you’re having trouble with Windows Update. The error message you provided indicates that the Windows Update API failed to assess your machine for available updates due to an error with the HRESULT code 0x80072efe. This error code is usually related to connectivity issues on your Windows machine that runs the update assistant successfully.

Here are two possible solutions to fix this error:

1. Change Date and Time: To download and install Windows updates, your installation of Windows must meet certain criteria so Microsoft knows that you are downloading the updates to a certified copy of the operating system. Oddly, this includes having the correct date and time set on your PC. Without the correct date and time, you can get error 0x80072efe. Simply change the date and time to be correct and try Windows Update again .
2. Turn Off Windows Firewall: Firewalls, virus scanners, and other software you have installed on your PC can get between your computer and the Windows Update servers. Disabling Windows Firewall sometimes fixes the error. You just need to remember to turn it back on when you are finished

Hope this helps you.

Answer 2

Hello,

Thank you for posting in Q&A forum.

I believe you have observed the update error and find possible RCA such as system time mismatch. Here I want to introduce another workaround which will help you better manage Azure VM Windows update.

By enabling Update Management, you will be able to manage the update from Azure Portal more effectively and get more insights about the Windows Update.

For further details, please refer to:

https://learn.microsoft.com/en-us/azure/automation/update-management/enable-from-vm

Hope this answer can help well in your case.