Fix Windows Defender Error 0x800b0100

Windows Defender error 0x800b0100 usually appears when the antivirus definitions fail to update, and the fix is to clear the update cache and manually reinstall the latest definitions. This error, which means “The subject name is not trusted,” occurs when the digital signature on a definition file cannot be verified, often due to a corrupted cache or an outdated system certificate. Below is a step-by-step guide to resolve it, along with background on why it happens and how to prevent it.

What Causes Error 0x800b0100?

The error code 0x800b0100 is a Windows Update–related error that translates to TRUST_E_SUBJECT_NOT_TRUSTED. In the context of Windows Defender, it means the update files downloaded to your PC failed a signature check. Common triggers include:

A corrupted or incomplete download of the definition update.
Antivirus software or a firewall interfering with the update process.
System date/time being incorrect, which breaks certificate validation.
Missing or outdated root certificates on the system.
Third-party security software that conflicts with Defender.

How to Fix Error 0x800b0100

Follow these steps in order. Most users resolve the issue with the first two steps.

Step 1: Run Windows Update Troubleshooter

Open Settings (Windows key + I) > Update & Security > Troubleshoot.
Select Windows Update and click Run the troubleshooter.
Let it scan and apply any fixes. Restart your PC and try updating Defender again.

Step 2: Clear the Windows Update Cache

Corrupted update files are a leading cause. Clearing the cache forces Windows to download fresh copies.

Open Command Prompt as administrator (search cmd, right-click, Run as administrator).
Type the following commands one by one, pressing Enter after each:
net stop wuauserv
net stop bits
Now delete the contents of the SoftwareDistribution folder. In File Explorer, navigate to C:\Windows\SoftwareDistribution\Download and delete all files inside (you may need to take ownership if prompted).
Restart the services with:
net start wuauserv
net start bits
Restart your PC and try updating Defender again.

Step 3: Manually Download and Install Definitions

If the built-in update still fails, download the latest definitions directly from Microsoft’s security portal. Visit the Microsoft Security Intelligence page and download the Windows Defender Antivirus update for your system (x64 or x86). Run the installer, and it will update Defender without relying on Windows Update.

Step 4: Check System Date and Time

Incorrect date/time breaks certificate checks. Right-click the clock in the taskbar, select Adjust date/time, and enable Set time automatically and Set time zone automatically. If they were already on, toggle them off and on, then sync the clock manually.

Step 5: Repair System Files

Corrupted system files can also cause this. Run the System File Checker and DISM tools:

Open Command Prompt as administrator.
Run sfc /scannow and wait for it to finish.
Then run DISM /Online /Cleanup-Image /RestoreHealth.
Restart your PC after both complete.

Step 6: Temporarily Disable Third-Party Antivirus

If you have another antivirus installed, it may interfere with Defender. Temporarily disable its real-time protection (or uninstall it if you’re confident) and try updating Defender again. Remember to re-enable it afterward.

How to Prevent This Error in the Future

Keep Windows Update running on schedule—don’t disable it permanently.
Ensure your system date/time is always correct.
Avoid using third-party antivirus alongside Defender; choose one and stick with it.
Regularly run the Windows Update troubleshooter if you notice update issues.

Common Misconceptions

Many users think this error means their PC is infected or that Defender is broken. In reality, it’s almost always a signature verification failure due to a cache issue. Another misconception is that you need to reinstall Windows—this is rarely necessary and should be a last resort only after all other steps fail.

When to Seek Further Help

If you’ve tried all steps and the error persists, you may have a deeper system issue. Consider using the Windows Update Assistant or performing a repair install using the Media Creation Tool (which keeps your files). If you’re on an enterprise or managed device, contact your IT administrator—group policies can block updates and cause this error.

Frequently Asked Questions

Will I lose my files if I clear the update cache?

No. The SoftwareDistribution folder only contains temporary update files. Deleting them does not affect personal data.

Can I fix this error without administrator access?

No, most steps require admin rights. If you’re on a work computer, ask your IT department for help.

Does this error mean my antivirus is out of date?

Yes, it means Defender’s definitions are not updating, so your protection is not current. Fixing the error is important for security.

Is it safe to manually install definitions from Microsoft?

Yes, as long as you download from the official Microsoft Security Intelligence page. Always verify the URL is microsoft.com.

Will resetting Windows fix the error?

It might, but it’s a drastic step. Try the troubleshooting methods above first—they resolve the issue in the vast majority of cases.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →