Fix Error 0x80090016 on Windows 10: 7 Working Methods

Error 0x80090016 (UNKNOWN_ERROR) on Windows 10 stops Windows Update, the Microsoft Store, and sometimes app installations from completing. The fix is to repair the Windows Update components and clear the software distribution cache; if that fails, reset the cryptographic services and check system file integrity. Below are the exact steps, the likely causes, and what to do when the standard fixes do not work.

What Error 0x80090016 Actually Means

The hexadecimal code 0x80090016 maps to NTE_PROVIDER_DLL_FAIL in the Windows cryptographic API. In plain terms, Windows Update or the Store could not load or use a security provider DLL (dynamic link library) needed to encrypt or decrypt data during the update process. This is not a hardware failure or a sign of malware; it is a software state problem. The error usually appears in a dialog box titled “Something went wrong” with a “Try again” button that never succeeds. It can also appear in the Windows Update history log with the status “Failed to install”.

The most common triggers are a corrupted Windows Update cache, a damaged cryptographic service (CryptSvc), or leftover files from a previous failed update. Less often, a third-party security suite or a system file corruption causes it. Because the error touches the crypto layer, simply retrying the update rarely helps; the underlying state must be reset.

Before You Start: Backup and Restore Point

Some of the steps below involve deleting folders and stopping services. Create a system restore point first so you can roll back if anything goes wrong. Press Windows + R, type sysdm.cpl, go to the System Protection tab, select your drive, and click Create. Name it something like “Before 0x80090016 fix” and wait for it to finish. This takes about one minute and does not touch your personal files. If you prefer not to use restore points, at least note that the folders you will delete (SoftwareDistribution and catroot2) are recreated automatically by Windows, so the risk is low but not zero.

Method 1: Run the Windows Update Troubleshooter

Windows 10 includes a built-in troubleshooter that automates many of the manual steps below. It is worth running first because it is safe and may fix the problem without any command-line work.

Open Settings (Windows + I) and go to Update & Security.
Select Troubleshoot from the left menu, then click Additional troubleshooters.
Choose Windows Update and click Run the troubleshooter.
Follow the prompts; it may ask you to apply fixes as an administrator.

If the troubleshooter reports “Problems found” and fixes them, restart the PC and try the update again. If it finds nothing or the error persists, move to the manual methods below.

Method 2: Reset Windows Update Components Manually

This is the most reliable fix. It stops the update services, renames the cache folders, and restarts the services. Run Command Prompt as administrator: press Windows + X and select Command Prompt (Admin) or Windows PowerShell (Admin). Then run these commands one at a time, pressing Enter after each:

net stop wuauserv – stops Windows Update
net stop cryptSvc – stops the cryptographic service
net stop bits – stops Background Intelligent Transfer
net stop msiserver – stops Windows Installer
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old – renames the update cache
ren C:\Windows\System32\catroot2 catroot2.old – renames the crypto catalog
net start wuauserv – restarts Windows Update
net start cryptSvc – restarts the cryptographic service
net start bits – restarts BITS
net start msiserver – restarts Windows Installer

If any net stop command returns “service is not started,” that is fine – just continue. After the restart, Windows creates fresh cache folders automatically. Try the update again. If the error persists, the problem is deeper than the cache.

Method 3: Run System File Checker and DISM

Corrupted system files can cause the crypto DLL to fail. Run two built-in tools to repair them. Still in the admin Command Prompt, run:

sfc /scannow – this scans and repairs protected system files. It can take 10–20 minutes.
If SFC finds issues it cannot fix, run DISM /Online /Cleanup-Image /RestoreHealth – this repairs the Windows image itself. It can take 20–40 minutes depending on your drive speed.

After both complete, restart the PC and try the update. SFC and DISM are safe; they only replace corrupted files with the correct versions from the Windows component store. They do not delete personal data.

Method 4: Check for Third-Party Security Software Conflicts

Some antivirus or firewall suites hook into the Windows crypto layer and block the provider DLL that Windows Update needs. This is a known cause of 0x80090016. To test, temporarily disable your third-party antivirus real-time protection (not uninstall it) and try the update. If the update succeeds, the security software is the culprit. Check the vendor’s website for an updated version or a compatibility patch. If disabling does not help, re-enable it immediately. Do not leave your PC unprotected during the test – Windows Defender will step in if you disable a third-party suite, but it is still best to keep one active layer on.

Method 5: Repair the Cryptographic Service Registry Keys

If the crypto service itself is misconfigured, the above steps will not help. The registry key that controls CryptSvc can be reset to its default. This is more advanced – back up the registry first (File > Export in regedit). Then:

Press Windows + R, type regedit, and press Enter.
Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CryptSvc.
Check that the Start value is set to 2 (Automatic). If it is 4 (Disabled) or 3 (Manual), double-click it and set it to 2.
Close regedit and restart the PC.

Also verify that the wuauserv service (Windows Update) has its Start value set to 2 (Automatic) or 3 (Manual – it is normally Manual with triggers). Do not change it to Disabled. After the restart, try the update again.

Method 6: Use the Media Creation Tool for an In-Place Upgrade

If all else fails, the most thorough non-destructive fix is an in-place upgrade using the Windows 10 Media Creation Tool. This reinstalls Windows 10 while keeping your files, settings, and installed apps. Download the tool from Microsoft’s official website, run it, and choose “Upgrade this PC now.” The process takes 30–60 minutes and requires a stable power connection. It repairs the entire Windows component store, which resolves almost all persistent update errors. Your personal files remain untouched, but it is still wise to have a backup. After the upgrade, check Windows Update again – the error should be gone.

Frequently Asked Questions

Will deleting the SoftwareDistribution folder lose my updates? No. The folder only contains downloaded update files and logs. Windows will re-download whatever it needs. The .old folder you create is safe to delete later once the update works.

Can I fix this without an administrator account? No. All the methods above require admin rights because they stop system services and modify the registry. If you are on a standard account, ask the administrator to run these steps or to grant you temporary admin access.

Is this error caused by a virus? No. 0x80090016 is a software state error, not a malware symptom. However, if you suspect infection, run a full Windows Defender scan before troubleshooting, since malware can corrupt system files and mimic this error.

Why does the error appear in the Microsoft Store too? The Store and Windows Update share the same update infrastructure and crypto services. Fixing the underlying service state resolves both at once.

How long does the in-place upgrade take, and will I lose apps? It takes 30–60 minutes. Your installed apps and settings are kept. Only Windows system files are replaced. You will need to re-enter some product keys for paid software after the upgrade, so keep them handy.

What if the error returns after a few weeks? That points to a recurring corruption source – often a failing disk or a third-party driver. Run chkdsk C: /f in an admin command prompt to check the disk, and update your chipset and storage drivers from the manufacturer’s website.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →