Hey Bob
Try doing the following, go to
start > run and enter services.msc
In the services window find an entry called cryptographic services and
double click on it. Ensure its startup type is set to automatic and start
the service if its status is stopped.
You may also need rename a folder called catroot2 in
c:\windows\system32. If one of the catalog files in the catroot2 folder
becomes corrupt some updates will fail to install properly. Try then to
install the update again and see if it installs correctly.