Windows Patch Failure

Question

We are running into an issue while trying to patch multiple Windows 2012R2 servers
Multiple Patches KB(5009721, 5010583, & 5010419), pulling the patches from WSUS & pulling from online catalog. error code -80096005
When we try to install the patch manually we get the same error code - "Installer encountered an error: 0x80096005 - The timestamp signature and/or certificate could not be verified or is malformed."

We were able to install patch KB5010395 manually - which uses the same signature and certificate. So we are stumped as to what to do next

Any suggestions?

Answer 1

Hello @A P

As a general troubleshooting please try the next:

• Cleanup WinSxS folder: https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/clean-up-the-winsxs-folder?view=windows-11
• Reset Windows Update: https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-resources#reset-windows-update-components-manually
• Repair Windows image: https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/repair-a-windows-image?view=windows-11

This should bring the system status to a healthy state and complete the installation without issues.

Hope this helps with your query,

--
--If the reply is helpful, please Upvote and Accept as answer--

Answer 2

Hi,

There is a way to disable code signing through GPO, it's not recommended method but it help you to install the failed patches:

Please don't forget to mark helpful reply as answer