本文发表在 rolia.net 枫下论坛The 0x800C0008 error can indicate a problem with the SSL connection to
our servers. We have found that one of the most common causes of the
problem is the date/time being far enough off that the SSL connection
will be disallowed. There are a number of other things that have been
known to cause the problem. In the error page that we present, a
decision was made to only show the top cause. We do have a
Troubleshooter article that can be found under the Get Help and support
link on the site. I have an excerpt from that article below along with a
little more information.
Please try the following steps one at a time to see if any of these can
resolve the problem. Since you indicated that these are newly built
systems and I could assume that they were built similarly that the first
suggestion would not apply and you have already tried number 3. To
assist in helping to troubleshoot this issue please let me know if one
of these suggestions can resolve the problem.
Thank you,
Rob Satterwhite
Windows Update Support Mgr
Suggestion 1:
Temporarily disabling antivirus and firewall programs while you use
Windows Update may solve this problem. Be sure to enable them again when
you complete the update process. Some customers have also resolved this
issue by disabling or uninstalling Internet acceleration software.
Suggestion 2:
The error may occur because the language-setting in Internet Explorer is
missing. To add a language, in Internet Explorer, select
Tools-->Internet Options, and click the "Languages" button. Add a
language to the list if empty.
Suggestion 3:
Check the system time. SSL will not function if the system time is more
than 100 days off.
Check your date and time setting by following these steps:
1. Click on Start, Settings, Control Panel.
2. Open the Date/Time item.
3. Verify that you have the correct date and time configured on your PC
Suggestion 4:
Double-check a few settings in IE.
1. In IE, click on Tools, and select Internet Options from the
drop-down menu..
2. Click on the Security tab. Verify that the Internet Zone is
selected and then click the Custom Level button.
3. Under the ActiveX controls and plug-ins section make sure that you
have either "Enable" or "Prompt" set for these items:
a. Download signed ActiveX controls
b. Run ActiveX controls and plug-ins
c. Script ActiveX controls marked safe for scripting
4. Click on the Content tab and click the Certificates button.
5. Select the Trusted Root Certification Authorities tab.
6. Check for a certificate called "Microsoft Root Authority".
7. Double-click on it to open it's properties.
8. On the General tab, make sure that the Valid from dates are correct.
It should be "1/10/1997 to 12/31/2020"
9. On the Certification Path tab, under the Certificate Status section,
make sure it says "This certificate is OK."
10. Click OK, and now find a certificate called "NO LIABILITY
ACCEPTED".
11. On the General tab, make sure that the Valid from dates are
correct. It should be "5/11/1997 to 1/7/2004"
12. On the Certification Path tab, under the Certificate Status
section, make sure it says "This certificate is OK." Click OK. Click
the Close button.
13. Click Ok, and now find a certificate called "GTE CyberTrust Root".
You may have more than one of these with the same name. You need to
check the one that has an Expiration date of 2/23/2006.
14. On the General tab, make sure that the Valid from dates are
correct. It should be "2/23/1996 to 2/23/2006"
15. On the Certification Path tab, under the Certificate Status
section, make sure it says "This certificate is OK."
16. Next, click on the Advanced tab.
17. Scroll down the list and make sure there are check marks in the
boxes next to:
a. Use HTTP 1.1
b. Use SSL 2.0
c. Use SSL 3.0
18. Close all open browsers, then connect to the Windows Update site
and see if it works.
Suggestion 5:
Please disable the options to check for certificate revocation in
Internet Explorer:
1. Open Internet Explorer
2. Click "Tools."
3. Click "Internet Options" from the drop down menu.
4. Click the "Advanced" tab.
5. Scroll down to the Security Section.
6. Unselect "Check for publisher's certificate revocation."
7. Unselect "Check for server certificate revocation."
8. Click OK.
9. Close all Internet Explorer windows, and try Windows Update again.
Suggestion 6:
You might also be able to resolve this issue by deleting all of the
content in Program Files\Windowsupdate and Program
Files\Windowsupdate\V4 except for the iuhist.xml file located in Program
Files\Windowsupdate\V4.
Suggestion 7:
One customer performed an MSN Messenger update, which fixed his
0x800c0008 Windows Update issue as well. Correlation not yet determined
but an avenue to check if you have MSN Messenger installed.更多精彩文章及讨论，请光临枫下论坛 rolia.net
our servers. We have found that one of the most common causes of the
problem is the date/time being far enough off that the SSL connection
will be disallowed. There are a number of other things that have been
known to cause the problem. In the error page that we present, a
decision was made to only show the top cause. We do have a
Troubleshooter article that can be found under the Get Help and support
link on the site. I have an excerpt from that article below along with a
little more information.
Please try the following steps one at a time to see if any of these can
resolve the problem. Since you indicated that these are newly built
systems and I could assume that they were built similarly that the first
suggestion would not apply and you have already tried number 3. To
assist in helping to troubleshoot this issue please let me know if one
of these suggestions can resolve the problem.
Thank you,
Rob Satterwhite
Windows Update Support Mgr
Suggestion 1:
Temporarily disabling antivirus and firewall programs while you use
Windows Update may solve this problem. Be sure to enable them again when
you complete the update process. Some customers have also resolved this
issue by disabling or uninstalling Internet acceleration software.
Suggestion 2:
The error may occur because the language-setting in Internet Explorer is
missing. To add a language, in Internet Explorer, select
Tools-->Internet Options, and click the "Languages" button. Add a
language to the list if empty.
Suggestion 3:
Check the system time. SSL will not function if the system time is more
than 100 days off.
Check your date and time setting by following these steps:
1. Click on Start, Settings, Control Panel.
2. Open the Date/Time item.
3. Verify that you have the correct date and time configured on your PC
Suggestion 4:
Double-check a few settings in IE.
1. In IE, click on Tools, and select Internet Options from the
drop-down menu..
2. Click on the Security tab. Verify that the Internet Zone is
selected and then click the Custom Level button.
3. Under the ActiveX controls and plug-ins section make sure that you
have either "Enable" or "Prompt" set for these items:
a. Download signed ActiveX controls
b. Run ActiveX controls and plug-ins
c. Script ActiveX controls marked safe for scripting
4. Click on the Content tab and click the Certificates button.
5. Select the Trusted Root Certification Authorities tab.
6. Check for a certificate called "Microsoft Root Authority".
7. Double-click on it to open it's properties.
8. On the General tab, make sure that the Valid from dates are correct.
It should be "1/10/1997 to 12/31/2020"
9. On the Certification Path tab, under the Certificate Status section,
make sure it says "This certificate is OK."
10. Click OK, and now find a certificate called "NO LIABILITY
ACCEPTED".
11. On the General tab, make sure that the Valid from dates are
correct. It should be "5/11/1997 to 1/7/2004"
12. On the Certification Path tab, under the Certificate Status
section, make sure it says "This certificate is OK." Click OK. Click
the Close button.
13. Click Ok, and now find a certificate called "GTE CyberTrust Root".
You may have more than one of these with the same name. You need to
check the one that has an Expiration date of 2/23/2006.
14. On the General tab, make sure that the Valid from dates are
correct. It should be "2/23/1996 to 2/23/2006"
15. On the Certification Path tab, under the Certificate Status
section, make sure it says "This certificate is OK."
16. Next, click on the Advanced tab.
17. Scroll down the list and make sure there are check marks in the
boxes next to:
a. Use HTTP 1.1
b. Use SSL 2.0
c. Use SSL 3.0
18. Close all open browsers, then connect to the Windows Update site
and see if it works.
Suggestion 5:
Please disable the options to check for certificate revocation in
Internet Explorer:
1. Open Internet Explorer
2. Click "Tools."
3. Click "Internet Options" from the drop down menu.
4. Click the "Advanced" tab.
5. Scroll down to the Security Section.
6. Unselect "Check for publisher's certificate revocation."
7. Unselect "Check for server certificate revocation."
8. Click OK.
9. Close all Internet Explorer windows, and try Windows Update again.
Suggestion 6:
You might also be able to resolve this issue by deleting all of the
content in Program Files\Windowsupdate and Program
Files\Windowsupdate\V4 except for the iuhist.xml file located in Program
Files\Windowsupdate\V4.
Suggestion 7:
One customer performed an MSN Messenger update, which fixed his
0x800c0008 Windows Update issue as well. Correlation not yet determined
but an avenue to check if you have MSN Messenger installed.更多精彩文章及讨论，请光临枫下论坛 rolia.net