Error 0x80072f8f 0x20000: Fix Windows Update

Error code 0x80072f8f 0x20000 appears when Windows Update or Microsoft Store cannot establish a secure connection, usually due to an incorrect system date, time, or time zone. You can fix it by setting the correct time and date, clearing the update cache, or resetting network settings — detailed steps below.

What This Error Means

Windows uses HTTPS (secure HTTP) to download updates from Microsoft servers. The error 0x80072f8f 0x20000 is a network-related failure that occurs when the Secure Sockets Layer (SSL) handshake fails. The most common trigger is a mismatch between your computer’s clock and the actual time, which breaks the SSL certificate validation. Other causes include corrupted update cache, a misconfigured proxy, or firewall/antivirus interference.

This error is not specific to a single Windows version — it has been reported on Windows 7, Windows 8.1, and Windows 10. On Windows 11, a similar error may appear with a different code, but the fixes below apply to all recent versions.

Quick Fix: Check Date and Time

An incorrect system clock is the #1 cause of this error. Even being off by a few minutes can break SSL validation.

1. Right-click the clock in the taskbar and select Adjust date/time.
2. Turn on Set time automatically and Set time zone automatically.
3. If they are already on, turn them off, manually set the correct time and time zone, then turn them back on.
4. Restart your PC and try Windows Update again.

If you are in a region with unusual daylight saving rules, the automatic time zone may be wrong. Manually select your time zone from the dropdown.

Clear the Windows Update Cache

Corrupted update files can also cause this error. Resetting the update cache forces Windows to download fresh files.

1. Press Win + R, type services.msc, and press Enter.
2. Find Windows Update in the list, right-click it, and select Stop.
3. Open File Explorer and go to C:\Windows\SoftwareDistribution\Download.
4. Delete everything inside that folder (you may need admin permission).
5. Return to the Services window, right-click Windows Update, and select Start.
6. Restart your PC and try updating again.

If you also use Microsoft Store, clear its cache too by running wsreset.exe from the Run dialog.

Reset Network and Proxy Settings

A misconfigured proxy or a broken network stack can block HTTPS connections. Resetting them often resolves the error.

1. Open Settings > Network & Internet > Proxy.
2. Under Manual proxy setup, turn off Use a proxy server if it is on.
3. Press Win + X and select Command Prompt (Admin) or Windows PowerShell (Admin).
4. Run these commands one by one, pressing Enter after each:

netsh winsock reset
netsh int ip reset
ipconfig /release
ipconfig /renew
ipconfig /flushdns

Restart your PC. If you use a VPN or a custom DNS, temporarily disable them to see if they are the culprit.

Run the Windows Update Troubleshooter

Windows includes a built-in troubleshooter that can automatically detect and fix update problems.

1. Open Settings > Update & Security > Troubleshoot (Windows 10) or System > Troubleshoot (Windows 11).
2. Select Windows Update and click Run the troubleshooter.
3. Follow the on-screen instructions. It may take a few minutes.

If the troubleshooter finds nothing, try the Internet Connections troubleshooter as well.

Check Firewall and Antivirus Interference

Third-party security software can block Windows Update’s connection. To test this, temporarily disable your antivirus or firewall (not Windows Defender — that usually works fine). If the update succeeds, add Windows Update to the exception list or reinstall the security software.

Also ensure that Windows Defender Firewall is not blocking the service. Go to Control Panel > System and Security > Windows Defender Firewall > Allow an app through the firewall and make sure Windows Update is checked.

Advanced: Re-register Windows Update Components

If none of the above works, the update components themselves may be corrupted. Re-registering them can help.

1. Open Command Prompt as Administrator.
2. Run the following commands one by one:

net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserver

This renames the old update cache and creates fresh folders. Restart your PC and try updating again.

Frequently Asked Questions

Why does the error mention 0x20000?

The 0x20000 suffix is a sub-code that indicates a specific network or SSL failure within the broader 0x80072f8f family. It typically points to a connection timeout or certificate validation failure, not a missing update file.

Will this error go away on its own?

Usually not. The underlying cause (clock skew, cache corruption, or network misconfiguration) persists until you fix it. If it appears once, it will likely reappear on the next update attempt.

Can I ignore it and still use my computer?

Yes, your computer will function normally, but you won’t receive security updates, leaving you vulnerable. It’s best to resolve it promptly.

Does this error affect Windows 11?

Windows 11 uses a different update mechanism, but similar SSL errors can occur. The same fixes (date/time, cache reset, network reset) apply, though the exact error code may differ.

What if I have a corporate proxy or firewall?

If you’re on a work or school network, the proxy may be blocking the update servers. Contact your IT administrator — they may need to whitelist Microsoft’s update URLs or adjust SSL inspection settings.

Is there a risk of data loss when clearing the update cache?

No. The SoftwareDistribution folder only contains temporary update files. Deleting them is safe and will not affect your personal files.

Related

• Headphone Not Working in Windows 10? Fix It Now
• Android TV Not Downloading Apps? Fixes That Work
• Asana vs Microsoft Project: Key Differences