SCEP for Windows Server 2008 Standard no longer updating

Brett Duncan 111

Yes it's old and no it won't be upgraded anytime soon..
Anyways Server 2008 Standard with SCEP 4.10.209.0. Event id 20, 2003, 2001 in System Event log.

Installation Failure: Windows failed to install the following update with error 0x80070643: Security Intelligence Update for Microsoft Endpoint Protection - KB2461484 (Version 1.323.201.0). Microsoft Antimalware has encountered an error trying to update the engine. New Engine Version: 1.1.17400.5 Previous Engine Version: Engine Type: Antimalware User: ************** Error Code: 0x8007007f Error description: The specified procedure could not be found.

Microsoft Antimalware has encountered an error trying to update signatures. New Signature Version: 1.323.188.0 Previous Signature Version: Update Source: User Update Stage: Install Source Path: Signature Type: AntiSpyware Update Type: Full User: ************ Current Engine Version: 1.1.17400.5 Previous Engine Version: Error code: 0x8007007f

Detail of each of the above events ids respectively.

Software distribution folder renamed etc and SCEP uninstalled restarted and installed again same issue.

Anyone else with the same issue in the last 6 days ?

dannyb54 1 Reputation point

2020-09-08T14:36:25.823+00:00

Any lucky with this? experiencing the same issue with 2008 Standard, R2 member servers have updated fine... standard has constant failed scep update within software centre
Ben K 111 Reputation points

2020-09-15T23:03:04.563+00:00

Worked with Microsoft support and found a solution. Its posted in the answers below.
pdog123 1 Reputation point

2020-09-17T14:01:40.073+00:00

Has anyone verified this dll worked and that this is indeed a official fix?
pdog123 1 Reputation point

2020-09-17T14:02:10.54+00:00

Has anyone verified BenK-9145's dll worked and that this is indeed a official fix?
pdog123 1 Reputation point

2020-09-17T14:28:40.97+00:00

I used BenKs fix, it worked.

Accepted answer

Brett Duncan 111 Reputation points

2020-09-02T01:02:58.407+00:00

I'm assuming anyone can install the "2020-02 Extended Security Updates (ESU) Licensing Preparation Package for Windows Server 2008 for x86-based Systems (KB4538484)" update but whether the License on the server actually permits it or not.

How can I tell if the license has been extended by the customer ?
Please sign in to rate this answer.
Joy Qiao 4,886 Reputation points Microsoft Employee

2020-09-02T09:42:43.13+00:00

Hi,

Thank you for your actions and provide detailed information about what you did.
We could run command line "slmgr /dlv" as administrator to check the license type. You could also post it here and hide personal data before upload capture.

Bests,

Brett Duncan 111 Reputation points

2020-09-02T19:15:22.407+00:00

Which part of the information do you require and i will post it ?

Brett Duncan 111 Reputation points

2020-09-02T19:16:15.293+00:00

here's a small snippet from top!

22303-image.png

Joy Qiao 4,886 Reputation points Microsoft Employee

2020-09-03T08:32:16.503+00:00

Hi,

Seems like you have not brought ESU product key.
Here is the capture which have brought and activated with ESU key.

Brett Duncan 111 Reputation points

2020-09-03T19:02:54.99+00:00

Thankyou JoyQiao.

I will advise the different customers that they have not bought the Extended License.

Muhammad Zeeshan Afzal 1 Reputation point

2020-09-09T09:34:33.073+00:00

Is there any official document from Microsoft where they mentioned that SCEP updates are no longer available for Windows Server 2008? and you need to buy ESU for that? I am unable to find any. Please share if you have any.

dannyb54 1 Reputation point

2020-09-09T10:04:18.203+00:00

Struggling to find this as well

Ben K 111 Reputation points

2020-09-15T20:24:18.847+00:00

FYI, my servers do not show the ESU info on this screen either, but after working with Microsoft and applying their patch, the definitions are updating again as expected.
Sign in to comment

14 additional answers

Brett Duncan 111 Reputation points

2020-09-01T00:24:20.427+00:00

Installation Failure: Windows failed to install the following update with error 0x80070643: Security Intelligence Update for Microsoft Endpoint Protection - KB2461484 (Version 1.323.276.0).

Microsoft Antimalware has encountered an error trying to update the engine.
New Engine Version: 1.1.17400.5
Previous Engine Version:
Engine Type: Antimalware
User: XXXXX\XXXX
Error Code: 0x8007007f
Error description: The specified procedure could not be found.

Looks like Microsoft have borked SCEP on 2008 Standard
Please sign in to rate this answer.
Joy Qiao 4,886 Reputation points Microsoft Employee

2020-09-01T07:37:06.793+00:00

Hi,

Thank you for your reply.

Did you activate Windows Server 2008 with Extended Security Update?
Did you uninstall any other antivirus software? If installed, try to uninstall them.

Any error occur when you installed other updates instead of this one related with SCEP?

As Windows Server 2008 is out of support since Jan.14 2020. We would recommend to upgrade system or setup Windows Server 2016 or Windows Server 2019 for a better security protection and a good usage.

Bests,

Brett Duncan 111 Reputation points

2020-09-01T20:38:27.373+00:00

Hi,

Thanks for your reply.

Following the Extended Security Update article"

"For Windows Server 2008 SP2, you must have the servicing stack update (SSU) (KB4493730) that is dated April 9, 2019 SSU update installed. After installing KB4493730, you must install the January 14, 2020 SSU (KB4536953) or later. "

I can confirm checking one of the servers that the above updates are installed.
I also checked if i could install updates that were outstanding and was able to install "update Rollup 14 for Microsoft System Center 2012 R2 - Operations Manager Agent (KB4024942) sucessfully on that same server.

It still looks like SCEP support has now been turned off without warning or been broken as of the 25-26 of August 2020.

Brett Duncan 111 Reputation points

2020-09-01T21:43:12.453+00:00

I can also confirm that prerequisite Updates and the Extended support update (KB4538484) are installed on said server and the SCEP updates are still not working.

There is no other AV installed on the server and has never had any other AV installed on the server.

Microsoft Antimalware has encountered an error trying to update signatures.
New Signature Version: 1.323.324.0
Previous Signature Version:
Update Source: User
Update Stage: Install
Source Path:
Signature Type: AntiSpyware
Update Type: Full
User: XXXX\XXXX
Current Engine Version: 1.1.17400.5
Previous Engine Version:
Error code: 0x8007007f
Error description: The specified procedure could not be found.

Still failing with the following.
Sign in to comment
Jesper Breum 1 Reputation point

2020-09-04T07:51:47.6+00:00

Following.
FYI we have the same problem with 6 of our 2008 standard servers with SCEP 4.7 installed.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
dannyb54 1 Reputation point

2020-09-08T14:48:59.097+00:00

same issue with similair dates of late august...2008 R2 updating but a number of standard 2008 not...failed updated scep update sitting in software centre
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
NAUD Philippe 1 Reputation point

2020-09-08T15:49:15.497+00:00

Same Issue here, our 8 windows 2008 servers fail to update SCEP since late August
Please sign in to rate this answer.

0 comments No comments
Sign in to comment