RE: 0x800C0008

From: Greg Cottingham [MSFT] (gregco_at_online.microsoft.com)
Date: 05/18/04 

Date: Tue, 18 May 2004 19:39:11 GMT

Hi
This is Greg from the PSS Security Team....

The 0x800C0008 error can indicate a problem with the SSL connection to
our servers. We have found that one of the most common causes of the
problem is the date/time being far enough off that the SSL connection
will be disallowed. There are a number of other things that have been
known to cause the problem. In the error page that we present, a
decision was made to only show the top cause. We do have a
Troubleshooter article that can be found under the Get Help and support
link on the site. I have an excerpt from that article below along with a
little more information.

Including the time and date settings, missing CA Roots, IE settings etc.

I have had success with exporting the following Root CAs from a good sytem
and importing into the problem system:

        Microsoft Root Authority Dates: "1/10/1997 to 12/31/2020"
        NO LIABILITY ACCEPTED Dates: "5/11/1997 to 1/7/2004"
        GTE CyberTrust Root Dates: "2/23/1996 to 2/23/2006"
        Thawte Timestamping CA Dates: "12/31/1996 to 12/31/2020"

If the above does not work, below are some other suggestions
which was written by one of our Windows Update managers...

Please try the following steps one at a time to see if any of these can
resolve the problem.
 

Suggestion 1:
Temporarily disabling antivirus and firewall programs while you use
Windows Update may solve this problem. Be sure to enable them again when
you complete the update process. Some customers have also resolved this
issue by disabling or uninstalling Internet acceleration software.

 

Suggestion 2:
The error may occur because the language-setting in Internet Explorer is
missing. To add a language, in Internet Explorer, select
Tools-->Internet Options, and click the "Languages" button. Add a
language to the list if empty.

 

Suggestion 3:
Check the system time. SSL will not function if the system time is more
than 100 days off.

Check your date and time setting by following these steps:

1. Click on Start, Settings, Control Panel.
2. Open the Date/Time item.
3. Verify that you have the correct date and time configured on your PC

 

Suggestion 4:
Double-check a few settings in IE.

1. In IE, click on Tools, and select Internet Options from the drop-down
menu..
2. Click on the Security tab. Verify that the Internet Zone is
selected and then click the Custom Level button.
3. Under the ActiveX controls and plug-ins section make sure that you have
either "Enable" or "Prompt" set for these items:
      a. Download signed ActiveX controls
      b. Run ActiveX controls and plug-ins
      c. Script ActiveX controls marked safe for scripting
4. Next, click on the Advanced tab.
5. Scroll down the list and make sure there are check marks in the boxes
next to:
      a. Use HTTP 1.1
      b. Use SSL 2.0
      c. Use SSL 3.0

18. Close all open browsers, then connect to the Windows Update site and
see if it works.

Suggestion 5:
Please disable the options to check for certificate revocation inInternet
Explorer:

1. Open Internet Explorer
2. Click "Tools."
3. Click "Internet Options" from the drop down menu.
4. Click the "Advanced" tab.
5. Scroll down to the Security Section.
6. Unselect "Check for publisher's certificate revocation."
7. Unselect "Check for server certificate revocation."
8. Click OK.
9. Close all Internet Explorer windows, and try Windows Update again.

 

Suggestion 6:
You might also be able to resolve this issue by deleting all of the
content in Program Files\Windowsupdate and Program
Files\Windowsupdate\V4 except for the iuhist.xml file located in Program
Files\Windowsupdate\V4.

 

Suggestion 7:
One customer performed an MSN Messenger update, which fixed his
0x800c0008 Windows Update issue as well. Correlation not yet determined
but an avenue to check if you have MSN Messenger installed.

Please let me know if any of the above suggestions work

Thanks,

Greg Cottingham[MSFT]
gregco@online.microsoft.com
Microsoft PSS Security Team

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
Thread-Topic: 0x800C0008
thread-index: AcQ5cz+1JTMwklO/StKXk8GwSGwX8Q==
X-WN-Post: microsoft.public.windowsupdate
From: =?Utf-8?B?U2FuamF5?= <sanjaykumar@sg.pstsi.com>
Subject: 0x800C0008
Date: Thu, 13 May 2004 22:21:02 -0700
Lines: 9
Message-ID: <BBD2085B-5869-41E1-88C0-4CEF908DFFAF@microsoft.com>
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Utf-8"
Content-Transfer-Encoding: 7bit
X-Newsreader: Microsoft CDO for Windows 2000
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
Newsgroups: microsoft.public.windowsupdate
Path: cpmsftngxa10.phx.gbl
Xref: cpmsftngxa10.phx.gbl microsoft.public.windowsupdate:100260
NNTP-Posting-Host: tk2msftcmty1.phx.gbl 10.40.1.180
X-Tomcat-NG: microsoft.public.windowsupdate

I receive this message:
Windows Update has encountered an error. This may be due to a discrepancy
in your computer's time setting.

To check your date and time setting:

On the taskbar, double-click the time.
Verify that the date and time is correct.