Microsoft KB Archive/836937

= You receive error message 0x80070643 when you try to install updates for Windows XP from the Windows Update Web site =

PSS ID Number: 836937

Article Last Modified on 4/12/2005

-

The information in this article applies to:

 Microsoft Windows Update, when used with:  Microsoft Windows XP Home Edition

 Microsoft Windows XP Professional 

-





Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem. Before you make these changes, we recommend that you evaluate the risks that are associated with implementing this workaround in your particular environment. If you implement this workaround, take any appropriate additional steps to help protect your system.



SYMPTOMS
When you try to install updates from the Windows Update Web site, the installation fails. The Windows Update.log file may contain the following error message:

error 80070643



RESOLUTION
Warning This workaround may make your computer or your network more vulnerable to attack by malicious users or by malicious software such as viruses. We do not recommend this workaround but are providing this information so that you can implement this workaround at your own discretion. Use this workaround at your own risk.

Note A firewall is designed to help protect your computer from attack by malicious users or by malicious software such as viruses that use unsolicited incoming network traffic to attack your computer. Before you disable your firewall, you must disconnect your computer from all networks, including the Internet.

Note An antivirus program is designed to help protect your computer from viruses. You must not download or open files from sources that you do not trust, visit Web sites that you do not trust, or open e-mail attachments when your antivirus program is disabled.

For additional information about computer viruses, click the following article number to view the article in the Microsoft Knowledge Base:

129972Computer viruses: description, prevention, and recovery

To resolve this issue, use one or more of the following methods, in the order that they are presented:

Method 1: Rename the Edb.log file
This issue may occur if the hotfix installer references the Edb.log file, and the file is corrupted. To resolve this issue, rename the Edb.log file. To do this, follow these steps: <ol> Start Windows Explorer, and then open the following folder:

C:\WINDOWS\system32\CatRoot2\

</li> Right-click the Edb.log file, and then click Rename. Rename the file &quot;Edb.old.&quot;</li> Start Internet Explorer, and then open the Windows Update Web site to continue the updates.</li></ol>

If you still cannot install the updates, rename the CatRoot2 folder. To do this, follow these steps: <ol> Start Windows Explorer, and then open the following folder:

C:\WINDOWS\system32\

</li> Right-click the CatRoot2 folder, and then click Rename. Rename the CatRoot2 folder &quot;CatRoot2old&quot;.</li> Start Internet Explorer, and then open the Windows Update Web site to continue the updates.</li></ol>

If you still cannot install the updates, use the following methods:

Method 2: Register the DLL files
This issue may occur if the correct DLL files have not been registered. To register the DLL files, follow these steps:
 * 1) Click Start, click Run, type regsvr32 licdll.dll in the Open box, and then click OK. When you receive the message that the DllRegisterServer succeeded, click OK.
 * 2) Click Start, click Run, type regsvr32 regwizc.dll in the Open box, and then click OK. When you receive the message that the DllRegisterServer succeeded, click OK.

If you still cannot install the updates, use the following method:

Method 3: Repair the certificate
This issue may occur if the &quot;Microsoft Root Authority&quot; certificate or the &quot;NO LIABILITY ACCEPTED, (c)97 VeriSign, Inc.&quot; certificate under Trusted Root Certification Authorities has been removed. To resolve this issue, follow these steps:
 * 1) On another computer where the Microsoft Root Authority certificate has been installed, open Internet Explorer.
 * 2) Click Tools, and then click Internet Options.
 * 3) Click the Content tab, and then click Certificates.
 * 4) Click the Trusted Root Certification Authorities tab.
 * 5) Scroll down, and then click Microsoft Root Authority.
 * 6) Click Export.
 * 7) Follow the steps in the wizard to export the certificate to a DER Encoded Binary x.509-format file (.cer file) file on a floppy disk or to a shared folder that is accessible to the computer that cannot install updates.
 * 8) On the computer that cannot install updates, open Internet Explorer.
 * 9) Click Tools, and then click Internet Options.
 * 10) Click the Content tab, and then click Certificates.
 * 11) Click the Trusted Root Certification Authorities tab.
 * 12) Click Import.
 * 13) In the wizard, click Next.
 * 14) Click Browse to locate the file that you saved to a floppy disk or to a shared folder, and then click Open.
 * 15) Click Next, click Automatically select the certificate store based on the type of certificate, click Next, and then click Finish.

If you still cannot install the updates, use the following method:

Method 4: Delete the WUTemp files
This issue may occur if the contents of the WUTemp folder are corrupted. To resolve this issue, delete the Windows Installer temporary files.

Note These files are stored in a hidden folder. You must make the folder visible.

To delete the Windows Installer temporary files, follow these steps:
 * 1) Click Start, and then click My Computer.
 * 2) On the Tools menu, click Folder Options.
 * 3) Click the View tab.
 * 4) Click to clear the Hide protected operating system files (Recommended) check box.
 * 5) Click the Show Hidden files and folders option, and then click OK.
 * 6) Double-click Local Disk (C:).
 * 7) Double-click WUTemp.

Note If you have more than one hard disk drive on your computer, the WUTemp folder may be located on another partition. For example, the folder may be D:\WUTemp, or E:\WUTemp.
 * 1) On the Edit menu, click Select All to select all the files in the WUTemp folder.
 * 2) On the File menu, click Delete. If you are prompted to confirm the file deletion, click Yes.

If you still cannot install the updates, use the following method:

Method 5: Check the firewall, antivirus, and other software
A software firewall is a security system that acts as a protective boundary between a network and the outside world. If you have a firewall installed, it can prevent your computer from connecting to the Windows Update server. Look in the notification area of your desktop (in the lower right corner of your screen) to see if a firewall is running on your computer. In Windows XP, you may have to show all icons in the notification area to reveal your firewall icon. To identify the program that an icon represents, position your pointer over the icon and wait several seconds. When you find the icon for your firewall, right-click the icon. This action may reveal a menu that allows you to temporarily disable the firewall. Some common software firewalls include: ZoneAlarm, Norton Internet Security, McAfee Security, and BlackICE.

To determine if the firewall is causing the issue, temporarily disable the firewall, and then see if the error persists. If disabling the firewall resolves the issue, contact the firewall software manufacturer for directions about how to configure your firewall to allow you to use Windows Update. Make sure that TCP/IP ports 80 and 443 are open in both directions. Make sure that your firewall is not blocking scripting functions on Web sites.

To determine if your antivirus or other software is causing the issue, temporarily disable all non-Microsoft software, such as your antivirus software, or any Web accelerator or Web enhancement programs, before accessing the Windows Update Web site. If disabling the non-Microsoft software resolves the issue, contact the software manufacturer for directions about how to configure your software to allow you to use Windows Update.

Keywords: kbprb kberrmsg KB836937

Technology: kbWinUpdate kbWinUpdateSearch kbWinXPHome kbWinXPHomeSearch kbWinXPPro kbWinXPProSearch kbWinXPSearch

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.