Getting Error code: 0x80072f8f (Error description: A security error occurred) with Microsoft Defender Full Update Type on 2019 Datacenter Server

Question

Ensured that there are no time sync issue.

Microsoft Defender Antivirus has encountered an error trying to update security intelligence.

New security intelligence Version: 

Previous security intelligence Version: 1.393.1315.0

Update Source: Microsoft Update Server

Security intelligence Type: AntiVirus

Update Type: Full

User: NT AUTHORITY\SYSTEM

Current Engine Version: 

Previous Engine Version: 1.1.23060.1005

Error code: 0x80072f8f

Error description: A security error occurred 

Answer 1

Please check these similar threads for help - https://answers.microsoft.com/en-us/windows/forum/all/windows-defender-error-code-0x80072f8f/b1aa850d-f39f-4029-9320-5c39eed4d8c2

https://answers.microsoft.com/en-us/windows/forum/all/windows-defender-updates-not-installing-error/3cbe11e7-51fb-482e-9329-a8adb64c92ac

https://answers.microsoft.com/en-us/windows/forum/all/windows-defender-error-code-0x80072f8f/39df7d83-dc45-48d6-87d4-2cd008e438b9

Answer 2

Hi Amit,
Thanks, these did not resolve the issue. The time is correct on the machine.
Here is the WindowsUpdate log

2023/07/26 15:01:26.3589894 8204 4256 ComApi * START * Federated Search ClientId = Windows Defender (cV: XTXIdhXBHUmA/TWZ.1.0)

2023/07/26 15:01:26.3597286 9144 7420 IdleTimer WU operation (SR.Windows Defender ID 1) started; operation # 6; does use network; is not at background priority

2023/07/26 15:01:26.3598986 9144 8456 Agent Processing auto/pending service registrations and recovery.

2023/07/26 15:01:26.4510133 9144 8456 SLS Get response for service 9482F4B4-E343-43B6-B170-9A65BC822C77 - forceExpire[False] asyncRefreshOnExpiry[False]

2023/07/26 15:01:26.4511304 9144 8456 SLS Retrieving SLS response from server...

2023/07/26 15:01:26.4514295 9144 8456 SLS Making request with URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/10.0.17763.4499/0?CH=157&L=en-US&P=&PT=0x8&WUA=10.0.17763.3532&MK=Amazon+EC2&MD=r5.large and send SLS events.

2023/07/26 15:01:47.5987716 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:47.5987854 9144 8456 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)

2023/07/26 15:01:47.7142156 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:47.7142259 9144 8456 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:0

2023/07/26 15:01:47.8347312 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:47.8347569 9144 8456 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)

2023/07/26 15:01:47.9589604 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:47.9589708 9144 8456 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:1

2023/07/26 15:01:48.0720280 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:48.0720352 9144 8456 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)

2023/07/26 15:01:48.1974222 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:48.1975128 9144 8456 Misc *FAILED* [80072F8F] Library download error. Will retry. Retry Counter:2

2023/07/26 15:01:48.3171456 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:48.3171535 9144 8456 Misc *FAILED* [80072F8F] WinHttp: SendRequestToServerForFileInformation (retrying with default proxy)

2023/07/26 15:01:48.4273197 9144 8456 Misc *FAILED* [80072F8F] Send request

2023/07/26 15:01:48.4273318 9144 8456 SLS Complete the request URL HTTPS://sls.update.microsoft.com/SLS/{9482F4B4-E343-43B6-B170-9A65BC822C77}/x64/10.0.17763.4499/0?CH=157&L=en-US&P=&PT=0x8&WUA=10.0.17763.3532&MK=Amazon+EC2&MD=r5.large with [80072F8F] and http status code[0] and send SLS events.

2023/07/26 15:01:48.4273412 9144 8456 SLS *FAILED* [80072F8F] GetDownloadedOnWeakSSLCert

2023/07/26 15:01:48.4275169 9144 8456 SLS *FAILED* [80072F8F] Method failed [CSLSClient::GetResponse:622]

2023/07/26 15:01:48.4275299 9144 8456 Misc *FAILED* [80072F8F] Method failed [CSLSEndpointProvider::GetWUClientData:2232]

2023/07/26 15:01:48.4275345 9144 8456 Misc *FAILED* [80072F8F] Method failed [CSLSEndpointProvider::GetSecondaryServicesEnabledState:1686]

2023/07/26 15:01:48.4275393 9144 8456 Agent *FAILED* [80072F8F] Method failed [CAgentServiceManager::DetectAndToggleServiceState:2827]

2023/07/26 15:01:48.4275453 9144 8456 Agent *FAILED* [80072F8F] Failed to resolve federated serviceId 9482F4B4-E343-43B6-B170-9A65BC822C77

2023/07/26 15:01:48.4275533 9144 8456 Agent *FAILED* [80072F8F] Failed to execute service registration call {5ABAF91C-5C7D-41BF-A724-96213038E2AC} (cV: XTXIdhXBHUmA/TWZ.1.0.1)

2023/07/26 15:01:48.4276573 9144 8456 IdleTimer WU operation (SR.Windows Defender ID 1, operation # 6) stopped; does use network; is not at background priority

2023/07/26 15:01:48.4409394 8204 4684 ComApi * END * Federated Search failed to process service registration, hr=0x80072F8F (cV = XTXIdhXBHUmA/TWZ.1.0)