Re: Update Failure 0x800A138F and 0x800C0008 in Log


Hi Busch,

Thanks for your reply.

You may perform the following steps:

1. Please let me know if you can successfully access the following SSL web
site:

https://www.microsoft.com

If not, please refer to the following KB article to resolve the issue:

811834 PRB: Cannot visit SSL sites after you enable FIPS compliant
cryptography
http://support.microsoft.com/?id=811834

If it cannot resolve the issue, please perform the following steps:

1) In IE, click on Tools, and select Internet Options from the drop-down
menu.
2) Click on the Security tab. Verify that the Internet Zone is selected
and then click the Custom Level button.
3) Under the ActiveX controls and plug-ins section make sure that you have
either "Enable" or "Prompt" set for these items:

a. Download signed ActiveX controls
b. Run ActiveX controls and plug-ins
c. Script ActiveX controls marked safe for scripting

4) Click OK on Security Settings. Now click on the Content tab and click
the Certificates button.
5) Select the Trusted Root Certification Authorities tab.
6) Check for a certificate called "Microsoft Root Authority".
7) Double-click on it to open its properties.
8) On the General tab, make sure that the Valid from dates are correct.
It should be "1/10/1997 to 12/31/2020"
9) On the Certification Path tab, under the Certificate Status section,
make sure it says "This certificate is OK."
10) Click OK, and now find a certificate called "NO LIABILITY ACCEPTED".
11) On the General tab, make sure that the Valid from dates are correct.
It should be "5/11/1997 to 1/7/2004"
12) On the Certification Path tab, under the Certificate Status section,
make sure it says "This certificate is OK." Click OK. Click the Close
button.
13) Click Ok, and now find a certificate called "GTE CyberTrust Root".
You may have more than one of these with the same name. You need to check
the one that has an Expiration date of 2/23/2006.
14) On the General tab, make sure that the Valid from dates are correct.
It should be "2/23/1996 to 2/23/2006"
15) On the Certification Path tab, under the Certificate Status section,
make sure it says "This certificate is OK."
16) Click OK on the certificate, click the Close button on the
Certificates screen, and then click on the Advanced tab.
17) Scroll down the list and make sure there are check marks in the boxes
next to:

a. Use HTTP 1.1
b. Use SSL 2.0
c. Use SSL 3.0

18) Close all open browsers, then connect to the Windows Update site and
try to run the scan for updates.

2. Delete the Temporary Internet files by following these steps:

1) Open Internet Explorer, and click on Tools, and select Internet Options
from the drop-down menu.
2) Under the Temporary Internet files section, click on the Delete Files
button. Click the OK button on the popup message.
3) Now access the Windows Update site and try to run the scan for updates.

3. Leave the Default Gateway of the internal NIC blank.
4. Configure both the internal NIC and the external NIC to use the internal
DNS Service as the DNS Server.

On the DNS Server, create the DNS Forwarder to forward the external DNS
resolution requests to the ISP's DNS server. See:

323380 How to configure DNS for Internet access in Windows Server 2003
http://support.microsoft.com/?id=323380

5. Strictly followed the instructions in the KB article below to run CEICW:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

6. Configure the proxy settings:

1) Configure ISA's internal NIC as the proxy.
2) Run the command "proxycfg -u". This command specifies that both HTTP and
HTTPS servers must be accessed through the proxy server.
3) Reboot the machine.

Hope the information help.

Best regards,

Crina Li (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: "Volker Busch" <VBusch@xxxxxxxxxxxxxxxx>
| References: <OKpExiLVFHA.3572@xxxxxxxxxxxxxxxxxxxx>
<ZtuzB$QVFHA.3052@xxxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Update Failure 0x800A138F and 0x800C0008 in Log
| Date: Tue, 10 May 2005 10:28:46 +0200
| | Newsgroups: microsoft.public.windows.server.sbs
| | Hy Crina,
| 1. System time is correct, its synchronized with time servers.
| 2. it is unchecked
| 3. SBS Server has not installed the messenger
|
| Here is the Update Log:
| 2005-05-10 10:13:45 08:13:45 Success IUCTL Starting
| 2005-05-10 10:13:46 08:13:46 Success IUCTL Downloaded
| iuident.cab from http://windowsupdate.microsoft.com/v4/ to
| C:\Programme\WindowsUpdate\V4
| 2005-05-10 10:13:46 08:13:46 Success IUCTL Current
| iuengine.dll version: 5.4.3790.14
| 2005-05-10 10:13:46 08:13:46 Success IUCTL Current
iuctl.dll
| version: 5.4.3790.14
| 2005-05-10 10:13:46 08:13:46 Success IUENGINE Starting
| 2005-05-10 10:13:47 08:13:47 Success IUENGINE Determining
machine
| configuration
| 2005-05-10 10:13:47 08:13:47 Success IUENGINE Determining
machine
| configuration
| 2005-05-10 10:13:51 08:13:51 Success IUENGINE Querying
software
| update catalog from https://v4.windowsupdate.microsoft.com/getmanifest.asp
| 2005-05-10 10:16:19 08:16:19 Error IUENGINE Querying
software
| update catalog from
https://v4.windowsupdate.microsoft.com/getmanifest.asp
| (Error 0x800C0008)
|
| I had also a problem to install license certificates (i made it with
| telefone) maybe this will help you:
| System Eventlog
| Quelle: SBCore
| Kategorie: 1019
| The Activating of the licensecodes over the internet fails with
failurecode:
| 0x80078009
|
| Volker Busch
|

.