ZTIWindowsUpdate Error 438
-
Tuesday, September 11, 2012 10:43 PM
Looking for some advice on how to troubleshoot this one. I'm preparing an upcoming deployment of Windows 8 using MDT 2012 Update 1 and WSUS v3.0 SP2. The post-installation Windows Update process recognizes updates but never downloads and installs them. The update process does work fine when deploying Windows 7 images.
[Upon searching one of the errors listed below, 0x80246003, I realized from here that WSUS v3.0 SP2 does not support Win8. Microsoft released KB2734608 that introduces support for WSUS v3.0 SP2 for Windows 8]
From the MDT Deployment Summary:
- ZTI Error - Unhandled error returned by ZTIWindowsUpdate: Object doesn't support this property or method (438)
From the BDD.log file with switch /debug:true for Windows Update in Task Sequence:
- Configuring Windows Update settings (manual update, use server) ZTIWindowsUpdate
Windows Update Agent verion 8 found, OK to continue
Ready to Opt-In to Microsoft Update: WUA Version: 7.8.9200.16384
Microsoft Update Service: Enabled = False
Command Line Procesed Query=False Registered=False UpdateCommand=[IsInstalled = 0 and IsHidden = 0]
Update progress [ 0 ] : Searching for updates
Start Search...
Update progress [ 0 ] : Processing 4 updates.
INSTALL - 729a0dcb-df9e-4d02-b603-ed1aee074428 - Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243) - 9 MB
INSTALL - f2b28914-a6bc-44c5-ac04-9e7fbdea657e - Security Update for Microsoft Silverlight (KB2690729) - 5 MB
INSTALL - 2272ab67-d52f-4279-97d6-a3a37ab146ed - Security Update for Lync 2010 X64 (KB 2693282) - 18 MB
INSTALL - 3533fca6-fb9c-477b-8a8f-53fa841a4a2b - Update Rollup for Lync 2010 X64 (KB2701664) - 18 MB
Scan complete, ready to install updates. Count = 4
Begin Downloading...
Update progress [ 0 ] : Downloading Security Update for Microsoft Visual C++ 2008 Service Pack 1 Redistributable Package (KB2538243)
Update progress [ 12 ] : Downloading Security Update for Microsoft Silverlight (KB2690729)
Update progress [ 23 ] : Downloading Security Update for Lync 2010 X64 (KB 2693282)
Update progress [ 23 ] : Downloading Security Update for Lync 2010 X64 (KB 2693282)
Update progress [ 59 ] : Downloading Security Update for Lync 2010 X64 (KB 2693282)
Update progress [ 59 ] : Downloading Update Rollup for Lync 2010 X64 (KB2701664)
Update progress [ 94 ] : Downloading Update Rollup for Lync 2010 X64 (KB2701664)
ZTI ERROR - Unhandled error returned by ZTIWindowsUpdate: Object doesn't support this property or method (438)
From the smsts.log file:
- Start executing the command line: cscript.exe "%SCRIPTROOT%\ZTIWindowsUpdate.wsf"
!--------------------------------------------------------------------------------------------!
Expand a string:
Executing command line: cscript.exe "%SCRIPTROOT%\ZTIWindowsUpdate.wsf"
Process completed with exit code 438
!--------------------------------------------------------------------------------------------!
Successfully complete the action (Windows Update (Post-Application Installation)) with the exit win32 code 438
Sending status message . . .
From the WindowsUpdate.log file:
- DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80246003.
DnldMgr WARNING: Resetting shared sandbox
DnldMgr WARNING: Download request generation failed with 0x80246003.
DnldMgr Error 0x80246003 occurred while downloading update; notifying dependent calls.
DnldMgr *********** DnldMgr: New download job [UpdateId = {A3E841B7-A4BC-41D0-AB2C-F02722CC439A}.100] ***********
DnldMgr WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr * Queueing update for download handler request generation.
DnldMgr Generating download request for update {A3E841B7-A4BC-41D0-AB2C-F02722CC439A}.100
Handler MSP download request: Lync.cab, file index = 0, type = full-file)
DnldMgr *********** DnldMgr: New download job [UpdateId = {A3E841B7-A4BC-41D0-AB2C-F02722CC439A}.100] ***********
DnldMgr WARNING: CheckIfDirExists returned error 0x80070002.
DnldMgr * BITS job initialized, JobId = {BA73CC7D-C60E-4F13-B104-67F3E0CAAD0C}
DnldMgr * Downloading from http://catpatch02/Content/B1/88F4BD4B3E4D6DC01E9BD93BFD0E829F5E1E14B1.cab to C:\windows\SoftwareDistribution\Download\fcc9d8deba80ea8f6e57ac42f19f538e\Lync.cab (full file).
DnldMgr BITS job {BA73CC7D-C60E-4F13-B104-67F3E0CAAD0C} completed successfully
DnldMgr CUpdateDownloadJob::GetNetworkCostSwitch() Neither unrestricted or restricted network cost used, so using current cost
Misc Validating signature for C:\windows\SoftwareDistribution\Download\fcc9d8deba80ea8f6e57ac42f19f538e\Lync.cab:
Misc Microsoft signed: Yes
DnldMgr Download job bytes total = 19541816, bytes transferred = 19541816
DnldMgr *********** DnldMgr: New download job [UpdateId = {A3E841B7-A4BC-41D0-AB2C-F02722CC439A}.100] ***********
DnldMgr * Queueing update for download handler request generation.
DnldMgr Generating download request for update {A3E841B7-A4BC-41D0-AB2C-F02722CC439A}.100
Handler MSP download: file Lync.cab already exists in sandbox directory (C:\windows\SoftwareDistribution\Download\fcc9d8deba80ea8f6e57ac42f19f538e)
Handler FATAL: MSI/MSP download: file Lync.cab failed certificate/hash validation. 0x80246003
Handler MSP Download: file C:\windows\SoftwareDistribution\Download\fcc9d8deba80ea8f6e57ac42f19f538e\Lync.cab passed cert/hash validation.
Handler FATAL: UH: 0x80246003: VerifyDownloadedFile failed in CUHMsiHandler::GeneratePatchDownloadRequest
DnldMgr FATAL: DM:CAgentDownloadManager::GenerateAllDownloadRequests: GenerateDownloadRequest failed with 0x80246003.
DnldMgr WARNING: Resetting shared sandbox
DnldMgr WARNING: Download request generation failed with 0x80246003.
DnldMgr Error 0x80246003 occurred while downloading update; notifying dependent calls.
COMAPI >>-- RESUMED -- COMAPI: Download [ClientId = <NULL>]
COMAPI - Download call complete (succeeded = 0, succeeded with errors = 0, failed = 4, unaccounted = 0)
COMAPI - WARNING: Exit code = 0x00000000; Call error code = 0x80240022
COMAPI ---------
COMAPI -- END -- COMAPI: Download [ClientId = <NULL>]
COMAPI -------------
MCITP Windows 7 MCTS Windows Server 2008
All Replies
-
Wednesday, September 12, 2012 8:28 AM
0x80246003 = The file metadata requested an unknown hash algorithm.
Does this happen every time? This is not related to MDT and more a Windows Update or WSUS issue.
Regards, Vik Singh "If this thread answered your question, please click on "Mark as Answer"
-
Tuesday, September 18, 2012 8:27 PM
I'm getting this error also and it does appear to be a MDT error to me since there is no problem checking for and installing the same updates outside of MDT.
Maybe there is an error in MDT WSUS settings.
I have added this to my customsettings.ini file:
WSUSServer=http://wsusserver
I also enabled the Windows Update Pre-Application task earlier in the deployment and later in the deployment I added the Windows Update Post-Application task.
Is that all you need to do?
They both failed, but when I manually checked for updates at the end of the deployment, it found and installed all the missing updates with no problem.
-
Tuesday, September 18, 2012 10:45 PM
This issue is definitely related to WSUS and not to MDT, as the WSUS patch I mentioned earlier, http://support.microsoft.com/kb/2734608, introduces support for Windows 8 and Windows Server 2012 with WSUS. I applied the patch in my lab and am still not seeing resolution. So I'm taking this issue to the WSUS forums and will report back once I have an answer. Here's the thread:
MCITP Windows 7 MCTS Windows Server 2008
-
Wednesday, September 19, 2012 6:38 AM
Also having this same problem, with a new WSUS environment built out about 2 months ago and brand new MDT 2012 Update 1. I read elsewhere that it could be a problem with certificates, but I created/deployed a self-signed certificate for the WSUS server and am still getting this error when building a reference image. The Windows Update service logs are probably key to tracking this down, but haven't had time to look yet.
Edit: I have a hunch this is related specifically to the SilverLight plugin, because in my WSUS reports it's the one update that failed to install. I've just declined it in WSUS and am trying my deployment again.
Another Edit: Disabling Silverlight didn't help, making sure that the latest hotfixes were installed on our WSUS servers also didn't help. But updates are being installed, so I'm thinking about finding just adding this fail code to the Success Code list for the update tasks- Edited by BenPeterson Wednesday, September 19, 2012 5:28 PM
- Edited by BenPeterson Wednesday, September 19, 2012 5:29 PM
- Edited by BenPeterson Wednesday, September 19, 2012 6:57 PM Added latest test results
-
Wednesday, September 19, 2012 10:30 PM
This issue is definitely related to WSUS and not to MDT, as the WSUS patch I mentioned earlier, http://support.microsoft.com/kb/2734608, introduces support for Windows 8 and Windows Server 2012 with WSUS. I applied the patch in my lab and am still not seeing resolution. So I'm taking this issue to the WSUS forums and will report back once I have an answer. Here's the thread:
MCITP Windows 7 MCTS Windows Server 2008
Turns out that this was in fact the problem, at least for me. I had installed the hotfix but not forced a sync to pull down revised updates. I did the following and am no longer error 438:
- On my WSUS server that pulls updates from Microsoft:
- Reboot (probably not needed, but I did it)
- Make sure the Server Manager Window is closed or at least hasn't loaded the WSUS snap-in
- Install KB2734608
- Open the WSUS console and kick off a synchronization. You should see a very large number of revised updates downloaded. Let the sync complete. This is the most important step
- Do a synchronization on all WSUS servers that pull updates from this server.
At this point, I tested a new deployment via MDT and things came back just fine. Although I recommend also running the WSUS server cleanup wizard as the revised updates left a bunch of cruft.
Interesting to note I am running into a different error now, 0x8024401C, but that's an entirely different problem with other threads already open for it.
- Edited by BenPeterson Wednesday, September 19, 2012 10:30 PM Added some details
-
Friday, November 30, 2012 9:10 PM
I am just now getting this error with deployments of Win 7. On some machines the WSUS updates run and others, it won't. We are using MDT 2012 sp1 with a TS to run WSUS before applications are installed and then again after TS for application installations run. I have also put in the customsettings.ini our wsus server name.
Running windows update after the deployment finishes shows that there are no updates to install. I ran two installations of x64 Win7 side by side on two different machines and one ran the WSUS TS and the other did not.
- Edited by chrisjr1273 Friday, November 30, 2012 9:12 PM
.png)
