Windows Update: We couldn't connect to the update service. We'll try again later, or you can check now. If it still doesn't work, make sure you're connected to the Internet.

Question

Windows Update encountered the issue:

And when I checked the log, I found the following error, as the screenshot shows:

Complete the request URL HTTPS://slscr.update.microsoft.com/SLS/{2B81F1BF-356C-4FA1-90F1-7581A62C6764}/x64/10.0.22623.1245/0?CH=284&L=zh-CN;en-US&P=RingExternal;WUMUDCat&PT=0x30&WUA=1022.1108.2012.0&MK=LENOVO&MD=82TF with [80072F8F] and http status code[0] and send SLS events.
2023-01-30 12:53:46.1497703 5260  16004 SLS             *FAILED* [80072F8F] GetDownloadedOnWeakSSLCert
2023-01-30 12:53:46.1498807 5260  16004 SLS             *FAILED* [80072F8F] Method failed [CSLSClient::GetResponse:624]

And when I visited the URL Windows Update requested, I got the following error, which stated that the certificate is not trustworthy:

NET::ERR_CERTIFICATE_TRANSPARENCY_REQUIRED

And someone had the same issue here: Windows Update fail 0x80072EFE - Microsoft Q&A

I followed his instructions to enable the required ECC curve, but the error persisted, and I checked the log, still showed up the same error "GetDownloadedOnWeakSSLCert".

So how should I solve this certificate error? And, Microsoft Store couldn't download anything, and I think it was the certificate issue too.

Answer 1

Also:

From: https://answers.microsoft.com/en-us/windows/forum/all/windows-update-will-not-work-after-windows-10-2004/606bb0f3-9fc5-485a-9b4e-b00242909d5b?page=3

SECjet

Replied on October 19, 2020Report abuse

SUCCESS!

From a known working computer I exported the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates tree. Then imported the whole thing onto a broken computer. Windows update immediately began working again. I have tested this on multiple computers and it fixes the problem every time. So it's 100% a corrupt, missing, and/or wrong certificate problem that's preventing windows update from connecting.

Now, getting Office to work again has a few steps involved. I'm still nailing down the exact process but it involves applying the registry keys, uninstalling Office (we use Office Standard 2016), running an in-place upgrade/reinstall, applying any additional updates after that's completed, reboot as needed and then reinstall Office. Further Office updates download and install no problem. 15 people found this reply helpful

Answer 2

Here you go → systemcertificates.reg (zipped)

Before applying, please do the following:

1. Backup the registry hives using the RegBak tool.
2. Create a system restore point.

If that doesn't do the trick, run a repair install.

• Download the Windows 11 ISO
• Double-click the ISO to mount it to a drive letter.
• Run Setup.exe and complete the repair process.

Your apps, settings, and data will be retained during the repair installation.

Answer 3

Hi,

I think these articles should be helpful.

https://borncity.com/win/2022/09/11/windows-update-error-0x80072f8f/

https://gavinmckay.wordpress.com/2010/09/28/howto-fixing-windows-update-error-code-80072f8f/

Answer 4

Hello yang洋,

Good day! I'm John DeV a Windows user like you and I'll be happy to assist you today. I know this has been difficult for you, Rest assured, I'm going to do my best to help you. When was the last time it worked properly?

Please try the following methods below.

**Reset Windows Update Components

https://www.tenforums.com/tutorials/24742-reset...

**Turn off Proxy

Press Start then search "Internet Options"

Select Connections > Lan settings

Turn off "Automatically detect settings"

Restart your computer

If it is already Turned off, please put a checkmark in "Automatically detect settings"

Restart your computer

**Change your network DNS

Open Control panel

Select Network and Internet > Network and Sharing center

Click Change adapter settings

a. To change the settings for an Ethernet connection, right-click the Ethernet interface and select Properties

b. To change the settings for a wireless connection, right-click the Wi-Fi interface and select Properties

Under Networking tab, double click TCP/IPv4

Select Use the following DNS server addresses. If there are any IP addresses listed in the Preferred DNS server or Alternate DNS server, write them down for future reference.

Replace those addresses with the IP addresses below

Preferred DNS server: 8.8.8.8 and/or 8.8.4.4

Click Ok

Restart your computer

**Reset Network Settings

Press Windows key+ I to open Settings

Select Network & Internet > Advanced network settings.

Click Network reset

Click Reset now then Yes

Restart your computer

Kindly let me know if this helps or if you have any further concerns.

Kind regards,

John DeV

Independent Advisor

Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Answer 5

Thanks for the articles. But none of these works, still get "GetDownloadedOnWeakSSLCert".