question

BrettDuncan-1566 avatar image
3 Votes"
BrettDuncan-1566 asked BrettDuncan-2805 answered

SCEP for Windows Server 2008 Standard no longer updating

Yes it's old and no it won't be upgraded anytime soon..
Anyways Server 2008 Standard with SCEP 4.10.209.0. Event id 20, 2003, 2001 in System Event log.

Installation Failure: Windows failed to install the following update with error 0x80070643: Security Intelligence Update for Microsoft Endpoint Protection - KB2461484 (Version 1.323.201.0). Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: 1.1.17400.5 Previous Engine Version: Engine Type: Antimalware User: ** Error Code: 0x8007007f Error description: The specified procedure could not be found.

Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: 1.323.188.0 Previous Signature Version: Update Source: User Update Stage: Install Source Path: Signature Type: AntiSpyware Update Type: Full User: Current Engine Version: 1.1.17400.5 Previous Engine Version: Error code: 0x8007007f

Detail of each of the above events ids respectively.

Software distribution folder renamed etc and SCEP uninstalled restarted and installed again same issue.

Anyone else with the same issue in the last 6 days ?

windows-server-security
· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Any lucky with this? experiencing the same issue with 2008 Standard, R2 member servers have updated fine... standard has constant failed scep update within software centre

0 Votes 0 ·

Worked with Microsoft support and found a solution. Its posted in the answers below.

0 Votes 0 ·

Has anyone verified this dll worked and that this is indeed a official fix?

0 Votes 0 ·

Has anyone verified BenK-9145's dll worked and that this is indeed a official fix?

0 Votes 0 ·

I used BenKs fix, it worked.

0 Votes 0 ·
BrettDuncan-1566 avatar image
0 Votes"
BrettDuncan-1566 answered BenK-9145 commented

I'm assuming anyone can install the "2020-02 Extended Security Updates (ESU) Licensing Preparation Package for Windows Server 2008 for x86-based Systems (KB4538484)" update but whether the License on the server actually permits it or not.

How can I tell if the license has been extended by the customer ?

· 8
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thank you for your actions and provide detailed information about what you did.
We could run command line "slmgr /dlv" as administrator to check the license type. You could also post it here and hide personal data before upload capture.

Bests,

0 Votes 0 ·

Which part of the information do you require and i will post it ?

0 Votes 0 ·

here's a small snippet from top!

22303-image.png


0 Votes 0 ·
image.png (3.3 KiB)
Show more comments
BrettDuncan-1566 avatar image
0 Votes"
BrettDuncan-1566 answered

PS. This is across a number of customers we look after and not just one Server at this stage all the same spec 2008 standard and SCEP 4.10.209.0.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JoyQiao-MSFT avatar image
0 Votes"
JoyQiao-MSFT answered

Hi,

I noticed you tried to install update package KB2461484 (Version 1.323.201.0) which is replaced by KB2461484 (Version 1.323.237.0) as Windows Update Catalog shows. So please check if the issue occur when download and install KB2461484 (Version 1.323.237.0) manually through Windows Update Catalog.

If the issue persists, please try to run the following command line as administrator.

Sfc /scannow

also please run the command line below or reset Windows Update with script:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
Ren C:\Windows\System32\catroot2 Catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

Bests,


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BrettDuncan-1566 avatar image
0 Votes"
BrettDuncan-1566 answered

Ran Sfc /scannow which found issues and fixed.

Tried the script and restarted and still not working.

We have 16 servers which are all 2008 Standard across 4 different customers with the same issue.

Going to start from scratch again and Uninstall SCEP.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BrettDuncan-1566 avatar image
0 Votes"
BrettDuncan-1566 answered BrettDuncan-1566 commented

Installation Failure: Windows failed to install the following update with error 0x80070643: Security Intelligence Update for Microsoft Endpoint Protection - KB2461484 (Version 1.323.276.0).

Microsoft Antimalware has encountered an error trying to update the engine.
New Engine Version: 1.1.17400.5
Previous Engine Version:
Engine Type: Antimalware
User: XXXXX\XXXX
Error Code: 0x8007007f
Error description: The specified procedure could not be found.

Looks like Microsoft have borked SCEP on 2008 Standard

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

Thank you for your reply.

Did you activate Windows Server 2008 with Extended Security Update?
Did you uninstall any other antivirus software? If installed, try to uninstall them.

Any error occur when you installed other updates instead of this one related with SCEP?

As Windows Server 2008 is out of support since Jan.14 2020. We would recommend to upgrade system or setup Windows Server 2016 or Windows Server 2019 for a better security protection and a good usage.

Bests,

0 Votes 0 ·

Hi,

Thanks for your reply.

Following the Extended Security Update article"

"For Windows Server 2008 SP2, you must have the servicing stack update (SSU) (KB4493730) that is dated April 9, 2019 SSU update installed. After installing KB4493730, you must install the January 14, 2020 SSU (KB4536953) or later. "

I can confirm checking one of the servers that the above updates are installed.
I also checked if i could install updates that were outstanding and was able to install "update Rollup 14 for Microsoft System Center 2012 R2 - Operations Manager Agent (KB4024942) sucessfully on that same server.


It still looks like SCEP support has now been turned off without warning or been broken as of the 25-26 of August 2020.

0 Votes 0 ·

I can also confirm that prerequisite Updates and the Extended support update (KB4538484) are installed on said server and the SCEP updates are still not working.

There is no other AV installed on the server and has never had any other AV installed on the server.

Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version: 1.323.324.0
Previous Signature Version:
Update Source: User
Update Stage: Install
Source Path:
Signature Type: AntiSpyware
Update Type: Full
User: XXXX\XXXX
Current Engine Version: 1.1.17400.5
Previous Engine Version:
Error code: 0x8007007f
Error description: The specified procedure could not be found.

Still failing with the following.

0 Votes 0 ·
JesperBreum-3430 avatar image
0 Votes"
JesperBreum-3430 answered

Following.
FYI we have the same problem with 6 of our 2008 standard servers with SCEP 4.7 installed.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

dannyb54-0975 avatar image
0 Votes"
dannyb54-0975 answered

same issue with similair dates of late august...2008 R2 updating but a number of standard 2008 not...failed updated scep update sitting in software centre

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

NAUDPhilippe-0884 avatar image
0 Votes"
NAUDPhilippe-0884 answered

Same Issue here, our 8 windows 2008 servers fail to update SCEP since late August

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BenK-9145 avatar image
0 Votes"
BenK-9145 answered PaulFaulkner-0697 commented

We are seeing the same thing. 2008 NON R2. Last Definition update happened on 8/24. 8/25 they started failing with the same errors as above.
2008 R2 servers are working normally

I tried to run the ESU updates to verify and they all just say its not applicable to the servers.

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Just an update, I have opened a case with Microsoft on this and they are currently investigating. They have acknowledged there is an issue, and they tried a fix that did not solve the issue so they are back with engineering to try and come up with a new fix.

0 Votes 0 ·

Would you be able to keep us updated if any of the fixes work? :)

0 Votes 0 ·

As soon as I have any update I will post here.

1 Vote 1 ·
Show more comments

Hi,

I don't suppose you've had any further update from MS on this issue please? Thanks.

0 Votes 0 ·
WayneW-2010 avatar image
0 Votes"
WayneW-2010 answered

Same issue, but also want to note that the updates are being downloaded repeatedly to the server, adding 220MB of data each time. Depending on how frequently you're set to check for updates (we check hourly), this can fill up the hard disk pretty quickly.

If you're suddenly seeing space issues on your 2008 (non-R2) servers, check C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.