2024-01 Security Update Windows Server fails with 0x80070643
Hi All,
I have recently played around with Azure Update Manager for VM and ARC. I had Problems installing the “2024-01 Security Update for Microsoft server operating system version 21H2 for x64-based Systems (KB5034439)” on the Windows Server 2022 Azure VM until i found the following Article
The Update failed to install
So i took a closer look at the Windows update Log C:\Windows\WindowsUpdate.log
Windows Update logs are now generated using ETW (Event Tracing for Windows). Please run the Get-WindowsUpdateLog PowerShell command to convert ETW traces into a readable WindowsUpdate.log. For more information, please visit https://go.microsoft.com/fwlink/?LinkId=518345
All right let’s run that command instead. This will create a WindowsUpdate.log File on the Desktop
Get-WindowsUpdateLog
found the error 0x80070643 in the Logs
2024.03.21 08:36:04.1009113 5632 3672 ComApi *QUEUED* Updates to Install = 1
2024.03.21 08:36:04.1009133 5632 3672 ComApi Install ClientId = MoUpdateOrchestrator (cV: P6yV5YK7d0Gr4ksj.2.0.0)
2024.03.21 08:36:04.1009573 5632 3672 ComApi Install call complete (succeeded = 0, succeeded with errors = 0, failed = 1, cancelled = 0, unaccounted = 0
2024.03.21 08:36:04.1010006 5632 3672 ComApi * END * All federated installs have completed. ClientId = MoUpdateOrchestrator (cV = P6yV5YK7d0Gr4ksj.2.1), hr = 0x00000000
2024.03.21 08:36:04.1184071 5632 4584 ComApi Serializing CUpdate A8A2D6E3-C6DC-4EB8-BCFB-8C8C7D947899.200, Last modified time 2024-03-15T08:39:01Z
2024.03.21 08:36:04.1187284 5632 4584 ComApi Update serialization complete. BSTR byte length = 13576
2024.03.21 08:36:04.3041870 5680 3296 DownloadManager ExtractUpdateFiles
2024.03.21 08:36:04.3044724 5680 3296 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Update f5618684-3665-4bd8-b24e-288050a05879.200, Top-level update a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200 deployment data prepared successfully.
2024.03.21 08:36:04.3051392 1180 3484 Handler * START * Command Line Install Updates to install = 1
2024.03.21 08:36:04.3141590 5632 4584 ComApi Serializing CUpdate A8A2D6E3-C6DC-4EB8-BCFB-8C8C7D947899.200, Last modified time 2024-03-15T08:39:01Z
2024.03.21 08:36:04.3145108 5632 4584 ComApi Update serialization complete. BSTR byte length = 13576
2024.03.21 08:36:06.8172221 1180 3484 Handler Command line install completed. Return code = 0x80004005, Result = Failed, Reboot required = false
2024.03.21 08:36:06.8174152 5680 1680 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Update a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200 failure delegate invoked.
2024.03.21 08:36:06.8174537 1180 3484 Handler * END * Command Line Install 0x8024200b
2024.03.21 08:36:06.8176826 1180 3484 Handler *FAILED* [8024200B] file = onecore\enduser\windowsupdate\client\engine\handler\cmdline\lib\uhcmdline.cpp, line = 1103
2024.03.21 08:36:06.8176849 1180 3484 Handler *FAILED* [8024200B] file = onecore\enduser\windowsupdate\client\engine\handler\cmdline\lib\uhcmdline.cpp, line = 1067
2024.03.21 08:36:06.8177063 5680 1428 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : NotifyClient (1428)(0) called for update id a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200, code = Update failed, percent complete = 100
2024.03.21 08:36:06.8177598 5680 1428 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : deployment callback for top-level update a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200, callback code = Update failed, reboot required = unspecified, commit required = No, mapped result = 0x80070643, unmapped result = 0x80004005
2024.03.21 08:36:06.8178810 5680 5356 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : NotifyClient (5356)(0) called for update id A8A2D6E3-C6DC-4EB8-BCFB-8C8C7D947899.200, code = Update failed, percent complete = 100
2024.03.21 08:36:06.8180514 5680 3296 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : Callback for inner update : F5618684-3665-4BD8-B24E-288050A05879.200, top-level update A8A2D6E3-C6DC-4EB8-BCFB-8C8C7D947899.200, reboot required = unspecified, commit required = No, callback info length = 0
2024.03.21 08:36:06.8182808 2892 2000 ComApi Deployment callback complete for UpdateID = a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899, callback code = 8, CallbackInfo cookie length = 0
2024.03.21 08:36:06.8183492 5680 3296 DownloadManager CloseUpdateInstallDirectory invoked for Update ID = F5618684-3665-4BD8-B24E-288050A05879.200, serverID = 9482F4B4-E343-43B6-B170-9A65BC822C77, Update installation result = 0x80070643.
2024.03.21 08:36:06.8184130 5680 3296 DownloadManager CloseUpdateInstallDirectory successful for Update ID = F5618684-3665-4BD8-B24E-288050A05879.200.
2024.03.21 08:36:06.8184239 5680 3296 DownloadManager Unlock the sandbox of update F5618684-3665-4BD8-B24E-288050A05879.200 (session data: (null))
2024.03.21 08:36:06.8187840 5680 5356 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : NotifyClient (5356)(0) called with Deployment callback code = Update failed, reboot status = unspecified
2024.03.21 08:36:06.8189034 5680 5356 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : Callback to client with code Update failed and error 0
2024.03.21 08:36:06.8197849 5680 3296 Deployment *FAILED* [80070643] Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Installing for Top level update id a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200, bundled update id f5618684-3665-4bd8-b24e-288050a05879.200 [CUpdateDeploymentJob::DeploySingleUpdateInternal:3103]
2024.03.21 08:36:06.8197894 5680 3296 Deployment *FAILED* [8024200B] Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Installing for Top level update id a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200, bundled update id f5618684-3665-4bd8-b24e-288050a05879.200 [CUpdateDeploymentJob::DeploySingleUpdateInternal:3122]
2024.03.21 08:36:06.8199123 5680 3296 Deployment *FAILED* [8024200B] file = onecore\enduser\windowsupdate\client\updatedeployment\lib\updatedeploymentjob.cpp, line = 3124
2024.03.21 08:36:06.8199349 5680 3296 Deployment Mutex will be closed. index = 0, HANDLE = 0000000000000EFC
2024.03.21 08:36:06.8199519 5680 3296 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Method failed for update a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200, hrDeploy = 0x8024200b
2024.03.21 08:36:06.8199544 5680 3296 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Update a8a2d6e3-c6dc-4eb8-bcfb-8c8c7d947899.200 failure delegate invoked.
2024.03.21 08:36:06.8310251 5680 3296 Agent AddEventGroup: Adding non-pending event for update id F5618684-3665-4BD8-B24E-288050A05879.200
2024.03.21 08:36:06.8310484 5680 3296 Agent AddEventGroup: Adding non-pending event for update id A8A2D6E3-C6DC-4EB8-BCFB-8C8C7D947899.200
2024.03.21 08:36:06.8333213 5680 3296 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Job complete delegate invoked.
2024.03.21 08:36:06.8333921 5680 3296 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : Ending deployment for updates, CallerId = Azure VM Guest Patching, Exit code = 0x00000000
2024.03.21 08:36:06.8336474 5680 1424 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : NotifyClient (1424)(0) called with Deployment callback code = Job complete, reboot status = no reboot
2024.03.21 08:36:06.8338864 5680 5452 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : WaitForEnd invoked for deployment job. Beginning the wait now!
2024.03.21 08:36:06.8338947 5680 5452 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : WaitForEnd for deployment job completed. Job state = Complete
2024.03.21 08:36:06.8339026 5680 5452 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : CallbackWorker returning successfully.
2024.03.21 08:36:06.8340258 5680 6064 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : WaitForEnd invoked for deployment job. Beginning the wait now!
2024.03.21 08:36:06.8340309 5680 6064 Deployment Deployment job Id 2E71760C-58F9-41D0-A6E7-94E6F967C3DF : WaitForEnd for deployment job completed. Job state = Complete
2024.03.21 08:36:06.8340368 5680 6064 Agent WU client deploy call id E23A3580-6DE0-491C-8A3A-415100346668 end wait complete for deployment job 2E71760C-58F9-41D0-A6E7-94E6F967C3DF.
2024.03.21 08:36:06.8340403 5680 6064 Agent WU client deploy call id E23A3580-6DE0-491C-8A3A-415100346668 final update deployment job 2E71760C-58F9-41D0-A6E7-94E6F967C3DF result = 0x00000000.
2024.03.21 08:36:06.8340433 5680 6064 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : Call complete delegate invoked.
2024.03.21 08:36:06.8341283 5680 5356 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668 : NotifyClient (5356)(0) called with Deployment callback code = Call complete, reboot status = unspecified
2024.03.21 08:36:06.8341590 5680 6064 Agent Deploy call E23A3580-6DE0-491C-8A3A-415100346668: Finishing deploying updates for CallerId = Azure VM Guest Patching
2024.03.21 08:36:06.8341610 5680 6064 Agent * END * execution of Deploy call id = E23A3580-6DE0-491C-8A3A-415100346668, CallerId = Azure VM Guest Patching
Solution
- Download Windows Server 2022 ISO
- Mount ISO
- Extract Install.wim
- Open “Install.wim” with 7 Zip
- and extract “Winre.wim” from \1\Windows\System32\Recovery
- Go to your Windows 2022 Server and navigate to C:\Windows\System32\Recovery
- Place the “WinRe.wim” to C:\Windows\System32\Recovery
Now you can enable Windows Recovery - after that the “WinRe.wim” from C:\Windows\System32\Recovery will be deleted
reagentc /info
reagentc /enable
reagentc /info
Now you can sucessfully install the 2024-01 Security Update for Windows Server
Regards
Andres Bohren
Azure Logo Windows Logo
