How To Fix Error Code 0x800b0109 When Installing Windows Updates

Jason Barrett Jason Barrett | | Misc

In this article I will show you how to fix the error code 0x800b0109 you are getting when you are trying to install the latest windows updates or latest feature release on windows 10.

You will see the error when you try to install the latest windows 10 updates and you will see an error like the one below.

Error Code 0x800b0109

Why Does The Error Code 0x800b0109 Appear?

The error code 0x800b0109 shows because A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider

This means that the update you are trying to install has a certificate / security assigned to it and it needs to be trusted by the client (Machine installing the update) in order to be installed.

Some times the client does have the required certificate / security install on the machine but still see the error, I will show you below how to resolve this.

Ways to Resolve the Error Code 0x800b0109 on Windows 10

I have a few methods to resolve the error code 0x800b0109 on windows 10 which are listed below.

Fix 1 : Allow Signed Updates Via Registry

In order to install windows updates on your machine a setting called “Allow Signed Updates” needs to be enabled.  To enable this setting do the following.

  1. Click start and type in regedit and hit enter
  2. If you are prompted by the user account control click yes
  3. Browse to HKEY_LOCAL_MACHINE \ Software \ Policies \ Microsoft \ Windows \ Windows Update
  4. Right click on the Windows Update folder and click on new > DWORD (32-bit) value
  5. Name the value AcceptTrustedPublisherCerts then double click on it and make sure hexadecimal is selected and enter 1 as the value data
  6. Click ok
    regedit AcceptTrustedPublisherCerts
  7. Close down the registry editor application
  8. Restart your machine
  9. Run the windows update application again
  10. If you still get the error code 0x800b0109 continue to the next step

Fix 2 : Run The Windows Update Troubleshooter Application

If you are still having issues windows 10 comes with a built in windows update troubleshooter tool, which we can use to resolve this issue.

To run this tool do the follow steps.

  1. At the windows 10 desktop
  2. Click start and click settings (Cog Icon)
    windows 10 settings
  3. Click on update & Security
    update and security
  4. In the left hand side menu click on troubleshoot, then click on windows update then Run the troubleshooter
    Windows Update Troubleshooter
  5. The troubleshooter tool will now check your system, when prompted click Apply this fix

Fix 3 : Install The Update Manually

Its possible to resolve this error by manually downloading and installing the troublesome update.  To do this follow these steps

  1. Manually run windows updates
  2. Click Start > Settings > Select Update and Security > Click Windows Update tab > Click check for updates
  3. The windows updates will now download and install
  4. If an update errors with the error code 0x800b0109 it will look like in the picture below
    manual windows update error 0x80248007
  5. Looking at the picture we can see that the update “Definition Update for Windows Defender – KB2267602” failed to install
  6. We need to grab the KB number in this error which is KB2267602 (Your KB number will probally be different)
  7. Head over to Microsoft Update Download Catalogue
  8. Search for the KB number
  9. Download the update to your system
  10. Double click on the file to install the update
  11. Once the update has been installed restart your machine
  12. Run windows update again and install all updates

Fix 4 : Use The DISM Tool

We can use the windows 10 tool called DISM (Deployment Image Servicing and Management) to check the windows 10 operating system files and fix any errors it finds.  To run this tool do the following.

  1. Click Start and type in cmd, then right click on command prompt and select run as administrator
  2. In the black window type in the below two commands and hit enter
  3. dism.exe /online /cleanup-image /scanhealth
  4. dism.exe /online /cleanup-image /restorehealth
  5. The tool will scan your windows 10 machine and will automatically fix any errors that could be causing the Error Code 0x800b0109
  6. Once the tool has finished scanning your machine restart your system
  7. Run windows update again

Fix 5 : Rebuild The Windows Update Cache

It is possible that a cached windows 10 update file is causing the 0x800b0109 error.  To reset the windows 10 update cache do the following.

  1. Click Start and type in cmd, then right click on command prompt and select run as administrator
  2. In the black window type in the below commands in bold one by one and hit enter
  3. net stop wuauserv
  4. cd %systemroot%\SoftwareDistribution
  5. ren Download Download.old
  6. net start wuauserv
  7. net stop bits
  8. net start bits
  9. net stop cryptsvc
  10. cd %systemroot%\system32
  11. ren catroot2 catroot2old
  12. net start cryptsvc
  13. Restart your machine
  14. Run windows update again

Third-Party Updates Fail to Install with Error 0x800b0109 in SCCM

I have also seen this issue with using SCCM to install third-party updates such as Adobe Reader and 7zip.  The error I saw on the client machines was as follows.

When I clicked on more information I saw the error 0x800b0109(-2146762487)

0x800b0109-sccm

To fix this error you will need to reapply the SCCM and WSUS certificate to the Trusted Root and Trusted Publishers certificate stores on all of your client machines that are installing third-party updates.

I redistributed the certificates via group policy.

Scan Failed With Error 0x800b0109

The last error message I have seen that I want to cover off is scan failed with error 0x800b0109.  I have seen this error a few times in windows 10 when you go in to windows updates and you click on check for updates.

The error will show and your machine will not check for windows updates.  In this case fix 1 should work to resolve this.

Conclusion

I have gone through all of the fixes that I can think of for this error.  I have seen it many times at my work place and have plenty of experience in fixing this error.

If you are getting the error 0x800b0109 when running windows updates and the fixes in this guide have not worked then leave a comment below and I will try to help you fix this issue.