Hello Gordon,
Try the following steps...
Step 1)Delete Temporary Internet Files
Close Internet Explorer
Start Internet Explorer and try the Windows Update Site again.
Step 2)
Check Security And Content Settings In Internet Explorer
Check the security settings for the Trusted sites zone in Internet Explorer.
To do so:
Open Internet Explorer, on the Tools menu, click Internet Options, and then
click the Security tab.
Click Trusted sites, and then click Default Level. (
Now click the Sites button.
Clear the check box "Require server verification (https
for all sites in
this
zone."
Type the following URL's EXACTLY as follows:
http://Windowsupdate.microsoft.com
http://V4.Windowsupdate.microsoft.com
https://v4.Windowsupdate.microsoft.com
http://Download.Windowsupdate.com
Type each one then, click Add, and repeat until they all show in the bottom
box.
Now click OK, and then click Apply.
TIP: It is also worth checking to make sure NONE of these URL's appear in
the
"Restricted Sites" section.... Some of the popular spy blocker type software
can
automatically place any URL in this section..
Clear the Secure Sockets Layer (SSL) state and AutoComplete history.
To do so:
(Windows XP Only...)
Open Internet Explorer, on the Tools menu, click Internet Options, and then
click
the Content tab.
Under Certificates, click Clear SSL State.
Click OK when you receive the message that the SSL cache was successfully
cleared.
Under Personal information, click AutoComplete.
Under Clear AutoComplete history, click Clear Forms. Click OK when you are
prompted to confirm the operation.
Click Clear Passwords. Click OK when you are prompted to clear all
previously saved
passwords, and then click OK two more times.
Close Internet Explorer
Start Internet Explorer and try the Windows Update Site again.
Step 3)
Verify that Internet Explorer is configured to use SSL 2.0 and SSL 3.0.
To do so:
Open Internet Explorer
On the Tools menu, click Internet Options, and then click the Advanced tab.
In the Settings box, under Security, click to select the Use SSL 2.0 and Use
SSL
3.0 check boxes (if they are not already selected), and then click OK.
Now Close Internet Explorer
Now open Internet Explorer and try the Windows Update site again.
If it fails with the 0x800A138F error again try Step 4
Step 4)
Please uncheck "Check for server certificate revocation":
Open Internet Explorer
Click on Tools
Click on Internet Options
Click on the Advanced tab
Scroll down to the Security Section
Unselect "Check for server certificate revocation"
Reboot the machine
Now open Internet Explorer and try the Windows Update site again.
If it fails with the 0x800A138F error again try Step 5
Step 5)
Verify that the Date and Time Settings on Your Computer Are Correct
Because SSL certificates have an expiry date, if the date on your computer
isn't
correct, it may prevent you from connecting to secure sites. To verify that
your
computer is configured with the correct date and time settings:
(NB - You could also check your date/time in the CMOS - on start up.....)
Now open Internet Explorer and try the Windows Update site again.
If it fails with the 0x800A138F error again try Step 6
Step 6)
The error may occur because the language-setting in Internet Explorer is
missing.
To add a language, in Internet Explorer:
Open Internet Explorer
Click on Tools
Click on Internet Options
Click on the General tab and click the "Languages" button.
Add a language to the list if empty.
Now click OK and then OK and close Internet Explorer
Step 7)
Temporarily disabling antivirus and firewall programs while you use Windows
Update may solve this problem. Be sure to enable them again when you
complete the update process...
If you have port 443 blocked at your router/firewall then try unblocking it.
Now open Internet Explorer and try the Windows Update site again.
If it fails with the 0x800A138F error again try Step 8
Step 8)
You might also be able to resolve this issue by deleting all of the content
in:
Program Files\Windowsupdate
and
Program Files\Windowsupdate\V4 (except for the iuhist.xml file located in
Program Files\Windowsupdate\V4)
Now open Internet Explorer and try the Windows Update site again.
If it fails with the 0x800A138F error again try Step 9
Step 9)
Verify that Internet Explorer Is Using 128-Bit Encryption
Internet Explorer High Encryption comes with Internet Explorer 5.5 and
above. It
provides you with 128-bit encryption, the highest level of protection
Microsoft can
offer for your Internet communications, including credit card use and
financial
transactions.
There have been some occasions when the Cipher Strength appears as 0 in
Internet
Explorer. This can occur if the Schannel.dll, Rsabase.dll, or Rsaenh.dll
files are
missing, damaged, or of the incorrect version.
To check you have 128-Bit:
In Internet Explorer, on the Help menu, click About Internet Explorer
The level of encryption on your computer appears next to the words Cipher
Strength.
Verify that the Cipher Strength value appears as 128-bit
If it does then close the window. If it shows 0-Bit then you are going to
have to
repair the damaged files...
Now open Internet Explorer and try the Windows Update site again.
Step 10)
Verify that Internet Explorer Proxy Settings
Open Internet Explorer
Click on Tools menu
Click on Internet Options
Click on the Connections tab and click the LAN settings button
Click Advanced and make sure there is a tick in the box next to:
"Use proxy server for all protocols."
Click OK and close Internet Explorer
Now open Internet Explorer and try the Windows Update site again.
Step 11)
Check The Hosts File...
There is a small file on your machine that MAY be causing you a problem...
Lets check it out:
Go To The Hosts File::
C:\WINDOWS\SYSTEM32\DRIVERS\etc (Windows XP)
C:\WINNT\SYSTEM32\DRIVERS\etc (Windows 2000)
C:\Windows\Hosts (Windows 98)
Use Notepad to view contents of the Hosts file.
(The Hosts file is a editable using notepad)
The lines at the beginning with # in the first column - IGNORE
If there are ANY entries in there that refer to Microsoft or to Akamai
DELETE
them!
Now close notepad accepting the changes.
Now open Internet Explorer and try the Windows Update site again.
I have now seen TWO reports where this has fixed the Windows Update issue,
(sadly
I
do not know the error message in the windows update log), and so offer it
here:
Click Start menu, and then click the Run icon.
In the small box that Opens, type the three letters: cmd then click the OK
button.
In the command prompt window that just opened (a black background and white
text),
type the following commands, pressing the ENTER key on your keyboard after
each
line:
regsvr32 urlmon.dll
regsvr32 shdocvw.dll
regsvr32 msjava.dll (Some of you may not have this one... That's OK)
regsvr32 mshtml.dll
regsvr32 browseui.dll
Now type the word: exit and the window will close.
Now Reboot and try and Microsoft Windows Update again....
Delete The Akamai Certificate...
There is a possibility of the Akamai security certificate causing problems.
Follow this:
Start Internet Explorer.
On the Tools menu, click Internet Options, and then click the Contents tab.
Click Certificates, click the Other People tab.
Click on the certificate called a248.e.akamai.net, click the remove button.
(If not
there then this is not your problem - close all windows.)
Click OK when you are prompted to confirm the deletion.
Now Close the open windows and Internet Explorer.
Start Internet Explorer and paste the following into the address:
https://v4.windowsupdate.microsoft.com/getmanifest.asp
When the Security Warning window appears click View Certificate.
On the the General tab, click Install Certificate
Click Next when the wizard window appears, keep the default setting ticked
"Automatically...."
Click Next, Click Finish.
Close the open windows, accept the Security Alert that is still displayed by
clicking Yes
Close Internet Explorer
Start Internet Explorer and try the Windows Update Site again.
If it fails with the 0x800A138F error again try Step 14
click Start menu, and then click the Run icon.
In the small box that Opens, type the three letters: cmd then click the OK
button.
In the command prompt window that just opened (a black background and white
text),
type the following commands, pressing the ENTER key on your keyboard after
each
line:
net start cryptsvc
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
regsvr32 cryptdlg.dll
Now type the word: exit and the window will close.
Now Reboot and try Microsoft Windows Update again....
--
Robert Mitchell
Windows NT4&2000 MCSE
Microsoft Enterprise Support
Search our Knowledge Base at
http://support.microsoft.com/directory
Visit the Windows 2000 Homepage at
http://www.microsoft.com/windows2000/default.asp
See the Windows NT Homepage at
http://www.microsoft.com/ntserver/
NOTE: Please reply to the newsgroup and not directly to me. This allows
others to add to and benefit from these threads and also helps to ensure a
more timely response. Thank you!
This posting is provided "AS IS" without warranty either expressed or
implied, including, but not limited to, the implied warranties of
merchantability or fitness for a particular purpose.
The views and opinions expressed in this newsgroup posting are mine and do
not necessarily express or reflect the views and / or opinions of Microsoft.
