CHiLL Posted February 15, 2017 Posted February 15, 2017 I'm having issues when SCCM is attempting to download KB3172989 from the Software Update Point. I've come across a few articles online, but they either don't work, or are for an older version of SCCM. We're currently running SCCM 1610 and so far I've found: Error log located in %temp%: Download destination = \\server\share$\Software Updates\Server 2016\816e0e9f-b4c7-4412-b8d5-8aa0b051be7d.1\Windows10.0-KB3172989-x64.cab . Software Updates Patch Downloader 15/02/2017 11:54:19 6752 (0x1A60) Contentsource = http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab . Software Updates Patch Downloader 15/02/2017 11:54:19 6752 (0x1A60) Downloading content for ContentID = 16795899, FileName = Windows10.0-KB3172989-x64.cab. Software Updates Patch Downloader 15/02/2017 11:54:19 6752 (0x1A60) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 10 percent complete Software Updates Patch Downloader 15/02/2017 11:54:21 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 20 percent complete Software Updates Patch Downloader 15/02/2017 11:54:22 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 30 percent complete Software Updates Patch Downloader 15/02/2017 11:54:24 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 40 percent complete Software Updates Patch Downloader 15/02/2017 11:54:25 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 50 percent complete Software Updates Patch Downloader 15/02/2017 11:54:27 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 60 percent complete Software Updates Patch Downloader 15/02/2017 11:54:28 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 70 percent complete Software Updates Patch Downloader 15/02/2017 11:54:29 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 80 percent complete Software Updates Patch Downloader 15/02/2017 11:54:31 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab in progress: 90 percent complete Software Updates Patch Downloader 15/02/2017 11:54:32 13864 (0x3628) Download http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab to C:\Users\ADMINI~1.SJW\AppData\Local\Temp\3\CABF85E.tmp returns 0 Software Updates Patch Downloader 15/02/2017 11:54:33 13864 (0x3628) Authentication of file C:\Users\ADMINI~1.SJW\AppData\Local\Temp\3\CABF85E.tmp failed, error 0x800b0004 Software Updates Patch Downloader 15/02/2017 11:54:38 13864 (0x3628) ERROR: DownloadContentFiles() failed with hr=0x80073633 Software Updates Patch Downloader 15/02/2017 11:54:38 6752 (0x1A60) The issue appears to be related to the fact that it is unable to authenticate/verify the update or the certificate. Due to this error, it is downloading the two preceding updates, however stopping at the fail, meaning no later updates are being downloaded. So far I've tried: Applying this patch: https://blogs.technet.microsoft.com/configurationmgr/2016/01/28/hotfix-windows-10-upgrades-are-not-downloaded-in-system-center-configuration-manager-1511/ but it is only applicable to 1511. I've tried manually downloading the .cab from http://wsus.ds.download.windowsupdate.com/d/msdownload/update/software/secu/2016/07/windows10.0-kb3172989-x64_b8a00e99c1fddf0580b538636b9da666952f23dc.cab and manually placing destination folder in SCCM's Software Updates, in hope that SCCM would detect it and move on to the next update. I've also tried moving the .cab into the %temp% folder, in hope that it would also be detected. I've tried turning off 'Protected Mode' in IE for the Internet zone while the download is occurring. I'm out of ideas and patience with this. If MS released a hotfix for it for 1511, why wasn't it incorporated into later releases?!
Wardrop Posted February 16, 2017 Posted February 16, 2017 Been having the exact same issue for weeks, ever since setting up an Automatic Deployment Rule for Server 2016 in SCCM. Same update, KB3172989. Such a pain.
Arthur Posted February 16, 2017 Posted February 16, 2017 @CHiLL. Which version of Windows Server is your SCCM server running on? 2016?
Wardrop Posted February 16, 2017 Posted February 16, 2017 Mine is Server 2012 R2, and I'm having the same exact issue.
Arthur Posted February 16, 2017 Posted February 16, 2017 Are both of your SCCM servers accessing the Internet through a proxy? https://blogs.technet.microsoft.com/configurationmgr/2010/12/13/system-center-updates-publisher-downloads-fail-with-error-0x800b0004-in-system-center-configuration-manager-2007/ ^ Although this article is for SCCM 2007, the error code matches the one listed in @CHiLL's log file (0x800b0004).
Wardrop Posted February 17, 2017 Posted February 17, 2017 Nope. No proxying here. I've just ended up excluding this particular update, as it seems to apply to Server 2016 Technical Preview 5 anyway. I achieved this by going to the properties of my auto deployment rule, and on the "Software Updates" tab, ticking "Article ID" and typing "-3172989" as the value. This excludes KB3172989. The Automatic Deployment Rule has since run successfully. Screenshot included. 1
CHiLL Posted February 17, 2017 Author Posted February 17, 2017 (edited) @CHiLL. Which version of Windows Server is your SCCM server running on? 2016? No, Server 2012 R2. Are both of your SCCM servers accessing the Internet through a proxy? https://blogs.technet.microsoft.com/configurationmgr/2010/12/13/system-center-updates-publisher-downloads-fail-with-error-0x800b0004-in-system-center-configuration-manager-2007/ ^ Although this article is for SCCM 2007, the error code matches the one listed in @CHiLL's log file (0x800b0004). We're using transparent proxy and all other updates download and deploy fine, it's just specifically this one update. Just to be sure though, I've followed those steps and set our manual proxy settings and that also didn't work. Nope. No proxying here. I've just ended up excluding this particular update, as it seems to apply to Server 2016 Technical Preview 5 anyway. I achieved this by going to the properties of my auto deployment rule, and on the "Software Updates" tab, ticking "Article ID" and typing "-3172989" as the value. This excludes KB3172989. The Automatic Deployment Rule has since run successfully. Screenshot included. [ATTACH=CONFIG]41634[/ATTACH] Cheers, I'll give that a go later today. Edit; @Wardrop That worked, so thanks for the info. Edited February 17, 2017 by CHiLL
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now