Installation Failure: Windows Failed To Install The Following Update With Error 0x800F0831

I recently ran in to a problem where software updates that were being pushed out via SCCM (Or WSUS) were failing to install and showed the following error in the eventvwr on the client “Installation Failure: Windows failed to install the following update with error 0x800F0831”

Error 0x800F0831

In fact trying to install the updates manually via windows updates also produced this error and the update failed to install.

Taking a look around a few forums I saw many people are having this issue.  It seems that some sort of update by Microsoft in August 2019 has caused this issue.

What Is Causing The Error 0x800F0831

After spending hours testing many fixes that I found on the internet, I managed to find the root cause to this error.

Microsoft in August 2019 have disabled SHA-1 signing support which means all software updates require SHA-2 signing.  But for your system to support SHA-2 signing you need to install the following two patches

  • KB4474419
  • KB4490628

For more information about this you can read this article on the microsoft website.

I installed these two patches on all my servers and then re-pushed all other patches and all successfully installed.

From my understanding this only affects windows 2008 and windows 7.  If it does affect more operating systems please let me know about it in a comment below.