locked
Replacing WSUS Server - Clients Can't Download Updates from New Server RRS feed

  • Question

  • Hi Everyone, 

    I need help with WSUS as my experience with it is limited and the sys admin who supported WSUS here moved on. I'm replacing a 2003 R2 WSUS server with a 2008 R2 WSUS server (We can't go to 2012 R2...long story...compliance issue). 

    The new WSUS server setup went smoothly and appeared to be functioning properly. This research network is not connected to the Internet so I set the new server to synchronize with the existing 2003 R2 server. It got all the updates. 

    I have 2 Windows 7 clients for testing and used a GPO to point them to the new WSUS server. But they get the 800B0001 error when I attempt to check for updates.

    We deleted the C:\windows\SoftwareDistribution folder on the clients but that did not help.  

    The WindowsUpdate.log on the clients shows the following

    FATAL: SubCA Chain Policy failed.
    WARNING: Digital Signatures on file C:\windows\SoftwareDistribution\SelfUpdate\wuident.cab are not trusted: Error 0x800b001
    FATAL: Ident cab verification failed with error 0x800B001
    WARNING: Selfupdate check failed to download package information, error 0x800B001
    FATAL: SelfUpdate check failed, err = 0x800B0001
     * WARNING: Skipping scan, self-update check returned 0x800B0001
     * WARNING: Exit code = 0x800B0001
    ******************
    ** END  **

    The server shows the two clients but no information from them yet. 

    After reading other posts on this and other sites, I tried installing KB2720211  but it failed and completly stopped the WSUS server from working. I tried a number of fixes for that but none of them worked and ended up re-installing WSUS server. We're at WSUS version 3.2.7600.226 so I don't know if that patch is valid for that version or not.  (We do not have Windows 2012 or 8 clients so I am not installing KB2734608 at this time.)

    I'd appreciate any help on getting the clients to download updates from the new WSUS server.

    Thanks.



    Wednesday, December 9, 2015 9:06 PM

Answers

  • Hi,

    >>FATAL: SelfUpdate check failed, err = 0x800B0001

    Please make sure that if the WSUS server has been updated to the latest verison:

    WSUS 3.0 (SP2):     Build 3.2.7600.226
    WSUS 3.0 (SP2) + KB2720211:     Build 3.2.7600.251
    WSUS 3.0 (SP2) + KB2734608:     Build 3.2.7600.256
    WSUS 3.0 (SP2) + KB2828185:     Build 3.2.7600.262
    WSUS 3.0 (SP2) + KB2938066:     Build 3.2.7600.274

    Best Regards.


    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Proposed as answer by Steven_Lee0510 Thursday, January 7, 2016 1:10 PM
    • Marked as answer by Steven_Lee0510 Thursday, January 7, 2016 10:41 PM
    Wednesday, December 30, 2015 2:32 AM

All replies

  • you can use wsus client diagnosis tool to rectify the error.

    http://www.solarwinds.com/products/freetools/diagnostic-tool-for-wsus-agent.aspx


    Darshana Jayathilake

    Thursday, December 10, 2015 7:18 AM
  • Hi,

    >>FATAL: SelfUpdate check failed, err = 0x800B0001

    Please make sure that if the WSUS server has been updated to the latest verison:

    WSUS 3.0 (SP2):     Build 3.2.7600.226
    WSUS 3.0 (SP2) + KB2720211:     Build 3.2.7600.251
    WSUS 3.0 (SP2) + KB2734608:     Build 3.2.7600.256
    WSUS 3.0 (SP2) + KB2828185:     Build 3.2.7600.262
    WSUS 3.0 (SP2) + KB2938066:     Build 3.2.7600.274

    Best Regards.


    Steven Lee Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    • Proposed as answer by Steven_Lee0510 Thursday, January 7, 2016 1:10 PM
    • Marked as answer by Steven_Lee0510 Thursday, January 7, 2016 10:41 PM
    Wednesday, December 30, 2015 2:32 AM