SCEP update error (0x800700c1) on Windows Server 2008 (non R2)

Question

SCEP update error (0x800700c1) on Windows Server 2008 (non R2)

Adrian Bliss 21

We are having an issue deploying updates to SCEP client on Windows Server 2008 (non R2) as of 22/10/2020. The following error is displayed in the WindowsUpdate.log

Installation Failure: Windows failed to install the following update with error 0x800700c1: Security Intelligence Update for Microsoft Endpoint Protection - KB2461484 (Version 1.325.1512.0).

When trying to install the manually downloaded updates an error reporting the .exe is not a valid Win32 application

SCEP on Windows Server 2008 R2 and above are working normally

Anyone else having this issue or seen it before?

Amandayou-MSFT 11,156 Reputation points

2020-10-28T08:19:36.517+00:00

It is related to Windows, modify the tag.
Ben K 111 Reputation points

2020-10-28T17:29:49.52+00:00

I have a case open with Microsoft support on this. Will update when I get more info. So far they have confirmed that it is a known issue.
Adrian Bliss 21 Reputation points

2020-10-28T18:11:04.413+00:00

Good to hear. Would appreciate any updates you can share
Ben K 111 Reputation points

2020-10-28T18:22:52.597+00:00

Will do. This is getting annoying after doing this 2 months ago.

https://learn.microsoft.com/en-us/answers/questions/81262/scep-for-windows-server-2008-standard-no-longer-up.html?childToView=113036#answer-113036
Terence Tung 1 Reputation point

2020-10-29T13:58:58.377+00:00

Do you get any updates from Microsoft? We have 4 Windows 2008 servers, of which one is non R2. The other three is fine with the SCEP update. It is the non-R2 have the same issue.
Ben K 111 Reputation points

2020-10-29T14:03:18.813+00:00

Nothing yet unfortunately. And yes, just like 2 months ago, this only affects 2008 NON R2.
Patrik Nygren 11 Reputation points

2020-10-30T08:33:42.877+00:00

Seems as Microsoft has silently fixed the issue. We are now receiving packages that install on our 2008 servers. We also have a case with them but no communication from them though.
So everyone, try downloading new packages and it should work.

Accepted answer

4 additional answers

Your answer

Amandayou-MSFT 11,156 Reputation points

2020-10-28T08:19:36.517+00:00

It is related to Windows, modify the tag.
Ben K 111 Reputation points

2020-10-28T17:29:49.52+00:00

I have a case open with Microsoft support on this. Will update when I get more info. So far they have confirmed that it is a known issue.
Adrian Bliss 21 Reputation points

2020-10-28T18:11:04.413+00:00

Good to hear. Would appreciate any updates you can share
Ben K 111 Reputation points

2020-10-28T18:22:52.597+00:00

Will do. This is getting annoying after doing this 2 months ago.

https://learn.microsoft.com/en-us/answers/questions/81262/scep-for-windows-server-2008-standard-no-longer-up.html?childToView=113036#answer-113036
Terence Tung 1 Reputation point

2020-10-29T13:58:58.377+00:00

Do you get any updates from Microsoft? We have 4 Windows 2008 servers, of which one is non R2. The other three is fine with the SCEP update. It is the non-R2 have the same issue.
Ben K 111 Reputation points

2020-10-29T14:03:18.813+00:00

Nothing yet unfortunately. And yes, just like 2 months ago, this only affects 2008 NON R2.
Patrik Nygren 11 Reputation points

2020-10-30T08:33:42.877+00:00

Seems as Microsoft has silently fixed the issue. We are now receiving packages that install on our 2008 servers. We also have a case with them but no communication from them though.
So everyone, try downloading new packages and it should work.

Answer 1

I just got a temporary workaround for this issue from Microsoft. This is a manual way to do the definition updates, and so you'll have to do it to update definitions each time you want to update them until they release a patch.

Download the definition updates from Microsoft. https://www.microsoft.com/en-us/wdsi/defenderupdates (Choose the System Center 2012 Endpoint Protection 32 or 64bit based on your OS)
Extract the downloaded file using 7-zip or another application. This should give you a all the different update files split out.
Copy all the files to the updates folder "C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\Updates"
Wait a few minutes and you'll see the files disappear and your client will be updated to the latest definition updates you downloaded.

I was told I would be updated once they release a full fix for the issue. So until then we'll be doing this manually.

Adrian Bliss 21 Reputation points

2020-10-29T22:55:08.103+00:00

A quick package and script should sort that out, hopefully it won't be too long until the full fix is released.

Thanks for sharing! :)

Answer 2

Patrik Nygren 11

Yep, we have the same error, on both x86 and x64 servers.

Actions tried thus far:

Running the full and delta updates from Windows Explorer
Running the full and delta updates from en elevated CMD
mpcmdrun -signatureupdate -mmpc

No success.

Answer 3

Anonymous

I'd verify system and servicing health by running;
sfc /scannow

also system update readiness tool

https://support.microsoft.com/en-us/kb/947821

Then check for errors in;
%SYSTEMROOT%\Logs\CBS\CheckSUR.log

--please don't forget to Accept as answer if the reply is helpful--

Patrik Nygren 11 Reputation points

2020-10-27T19:03:25.847+00:00

Forgot to mention that we have run SUR, no errors.

As for SFC, experience tells me that it's not worth the trouble, personally I have never been helped by it and also the odds that a large number of servers have had their protected files and/or drivers corrupt are miniscule.

So far my theory is that MS has either released faulty updates (compiled for wrong target OS or CPU architecture) or plainly given up on the old Windows 2008 Sp2.

/P
Adrian Bliss 21 Reputation points

2020-10-27T21:30:00.807+00:00

I don't think there is much point running SFC or SUR, no updates have been installed nor has there been any configuration changes on the systems.

Each W2k8 non R2 server performs a different role and all have stopped updating after the first sync on the 22/10/2020.

As PatrikNygren-3698 has mentioned, I think MS has released faulty updates again.

Answer 4

Venkatesh S 1

Hello,

I just tried manually updating the Definitions and it got success not sure how.

Patrik Nygren 11 Reputation points

2020-10-30T10:49:53.443+00:00

Microsoft has fixed the issue, without not much information though :-(.

Answer 5

Adrian Bliss 21

Normal Service as been resumed.

Thanks to BenK-9145 for working with MS and sharing the temporary workaround which he received and for everyone else who responded.

Case closed......... for now.

Share via

SCEP update error (0x800700c1) on Windows Server 2008 (non R2)

4 additional answers

Your answer