This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 64%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EC%3C/text%3E%3C/svg%3E)
Hi. Our site recently updated from SHA1 to SHA256 and the site server just migrated from 1906 to 2103. After installing the clients on the machine in order to point to the new sccm server, we’ve encountered a weird issue regarding software updates scan.
We have deployed some update patches to the clients and after a while, we can see that many clients has reported “compliant” for the patch deployment but some clients still reports “unknown” for the deployment status. Looking at WUAHander.log on the “Unknown” machines, we can see that it said “Scan failed with error 0x80244017”. After a bit of research, it seems that it is because of some connectivity issue. But our environment didn’t use a proxy server and the clients can access the urls suggested here. What’s worse is that there weren’t any “patterns” regarding the clients that can report “success” and those with “unknown” status. Some “unknown” clients even have the same GPO applied, same firewall settings and are neighbours on the ip address! (e.g. 192.168.x.101 and 192.168.x.102). We’ve tried re-installing the client but still no luck.
We use SSL in our environment and we can see in WUAHander.log that it is using the correct port (port 8531) for connection. Has anyone encountered similar issue? Thanks!
Hi, thanks for replying.
Unfortunately although we didn’t use SSL when this question was posted, using SSL still produces the same problem. But after a bit more research, I’ve run the Windows Update troubleshooting tools in the control panel and the tool fixed the problem.
Hi,
Thanks for your update and sharing, I am glad to hear that we have solved the problem. If there is any other assistance we can provide, please feel free to let us know, we will do our best to help you.
Thanks. Should I mark my own reply or your reply as answer? Because I can't seemed to find the "Accept Answer" for a reply of a reply
Hi,
In Q&A, the content in the answer tab could be marked as answer. I have converted your rely to answer, you can mark as answer, it will make someone who has the similar issue easily find the answer.
Best regards,
Amanda
Thanks a lot!
Hi @CUCOOPE ，
As mentioned, we use SSL in our environment, so please check if SSL certificate of 8531 is binded in IIS. Kindly refer to this picture:
If not, please bind SSL certificate.
And check whether the client could access the SimpleAuthWebService virtual directory. The URL should resemble the following URL
https://SUPSERVER.CONTOSO.COM:8531/SimpleAuthWebService/SimpleAuth.asmx
If it could not connect SimpleAuthWebService virtual directory, what does the page show as an error?
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.