Server 2008r2 unable to install software or updates or activate the ESU due to corrupt files and digital signature issues

Question

Our support customer has a legacy Server 2008r2 running an old HR application (this application is going to move to cloudbased next year but the customer needs this server until that happens)

They have been trying to update the server and install Sophos but are getting errors regarding corrupt files and installing anything with a digital signature. They have purchased the ESU but are also unable to activate that due to these issues.

Answer 1

I'd verify system and servicing health by running;
sfc /scannow

also system update readiness tool

https://learn.microsoft.com/en-us/troubleshoot/windows-server/deployment/fix-windows-update-errors

Then check for errors in;
%SYSTEMROOT%\Logs\CBS\CheckSUR.log

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

Hi DSPatrick

Thank you for your reply, we have tried the scannow command which returned the below:

I have asked them if they/we can run the others.
Regards
Melissa

Answer 3

Something here may help.
https://learn.microsoft.com/en-us/troubleshoot/windows-client/deployment/analyze-sfc-program-log-file-entries

also check the results of SUR tool here.
%SYSTEMROOT%\Logs\CBS\CheckSUR.log

--please don't forget to Accept as answer if the reply is helpful--

Answer 4

Hi Melissa,

Would you create a capture for error message when try to activate ESU?

Please refer to the link below to check if you have installed the SHA-2 code signing support update and servicing stack update (SSU) under Installation prerequisites.

Obtaining Extended Security Updates for eligible Windows devices

After that, activate with command line slmgr /ipk <ESU key> and recheck with slmgr /dlv.

If issue persists, after upper actions, please provide error message in Command Prompt.

Bests,

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.