[SOLVED] Error 0x800f0985 when installing updates on AWS EC2 Windows Server 2019 Datacenter.

[davyraitt]

Hey all. I am running a AWS EC2 that has Windows Server 2019 Datacenter.



I am failing to update this machine, and get the following error:

There were problems installing some updates, but we'll try again later.
2024-07 Cumulative Update for Windows Server 2019 (1809) for x64-based Systems (KB5040430) - Error 0x800f0985



What I tried so far:

- sfc /scannow , this says nothing is wrong

- rebooting

- manually installing the update file for KB5040430 , it just gives me the same error in the windows update logs

- running updates via powershell, same error

- recreating catroot and softwaredistribution folder

- windows update troubleshoot/repair tool

- chkdsk

- checked disk space there seems to be enough

- dism /online /cleanup-image /restorehealth , this fails:

[==========================100.0%==========================]
Error: 0xd0000034

DISM failed. No operation was performed.
For more information, review the log file.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

Log file DISM: dism error

Log file from windows update: windowsupdatelogs

CBS Logs: cbslogs


Im not sure where to go from here, many troubleshooting googles I did led me to here so I am posting a topic myself. Hope anybody has any ideas left in the tank

 

[davyraitt]

CBS logs during DISM: cbs logs during dism

I also ran the Sysnative Component scanner and this says "No corruptions were detected in the COMPONENTS hive."

 

[davyraitt]

Root cause seems to be this:

2024-08-09 09:12:27, Info                  CBS    (p)    CSI Payload Corrupt    (n)            amd64_microsoft-windows-winsqlite3_31bf3856ad364e35_10.0.17763.5328_none_63eb6ae3fb3f3f1e\r\winsqlite3.dll
2024-08-09 09:12:27, Info                  CBS    Repair failed: Missing replacement payload.
2024-08-09 09:12:27, Info                  CBS    (p)    CSI Payload Corrupt    (n)            x86_microsoft-windows-c..ervices-certocm-dll_31bf3856ad364e35_10.0.17763.5328_none_fb95483a221d6b3d\r\certocm.dll
2024-08-09 09:12:27, Info                  CBS    Repair failed: Missing replacement payload.

Havent been able to succesfully replace them yet, my windows version is: Windows Server 2019 Datacenter (1809) OS Build 17763.5576


I know I need the healthy files to replace them, I can mount a same version iso and refer to that in dism. But I havent been able to find what specific ISO I need. Would Windows Server 2019 Datacenter (1809) suffice? Or do I specifically need 17763.5576. Because I havent been able to find that yet.

 

[Maxstar]

Hi and welcome to Sysnative,

Upload a copy of the CBS folder

• Open Windows Explorer and browse to the C:\Windows\Logs folder.
• Right-click on the CBS folder and choose Send to > Compressed (zipped) folder.
• Now the message will appear, "Windows cannot create the Compressed (zipped) Folder here. Do you want it to be placed on the desktop instead?"
• Click on the Yes button here.

• Attach the file CBS.zip to your next reply. If the file is too large to attach, upload the CBS.zip file to www.wetransfer.com and post the link in your next reply.

 

[davyraitt]

Here you go

Hi and welcome to Sysnative,

Upload a copy of the CBS folder

• Open Windows Explorer and browse to the C:\Windows\Logs folder.
• Right-click on the CBS folder and choose Send to > Compressed (zipped) folder.
• Now the message will appear, "Windows cannot create the Compressed (zipped) Folder here. Do you want it to be placed on the desktop instead?"
• Click on the Yes button here.

• Attach the file CBS.zip to your next reply. If the file is too large to attach, upload the CBS.zip file to www.wetransfer.com and post the link in your next reply.

 

[Maxstar]

Step 1. Download

SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.

• Save any work you have open, and close all programs.
• Download the attachment SFCFix.zip and save it to your desktop.
• Drag the SFCFix.zip file over the SFCFix.exe executable and release it.

• SFCFix will launch, let it complete.
• Once done, a file will appear on your desktop, called SFCFix.txt.
• Post the logfile (SFCFix.txt) as attachment in your next reply.

Step 2. Run the following DISM command and post the result. If it fails attach a new copy of the CBS log.

DISM /online /cleanup-image /RestoreHealth

 

[davyraitt]

[==========================100.0%==========================] The restore operation completed successfully.
The operation completed successfully.

Well that looks a lot better :) Running windows update now

 

[davyraitt]

Root cause seems to be this:

2024-08-09 09:12:27, Info                  CBS    (p)    CSI Payload Corrupt    (n)            amd64_microsoft-windows-winsqlite3_31bf3856ad364e35_10.0.17763.5328_none_63eb6ae3fb3f3f1e\r\winsqlite3.dll
2024-08-09 09:12:27, Info                  CBS    Repair failed: Missing replacement payload.
2024-08-09 09:12:27, Info                  CBS    (p)    CSI Payload Corrupt    (n)            x86_microsoft-windows-c..ervices-certocm-dll_31bf3856ad364e35_10.0.17763.5328_none_fb95483a221d6b3d\r\certocm.dll
2024-08-09 09:12:27, Info                  CBS    Repair failed: Missing replacement payload.

Havent been able to succesfully replace them yet, my windows version is: Windows Server 2019 Datacenter (1809) OS Build 17763.5576


I know I need the healthy files to replace them, I can mount a same version iso and refer to that in dism. But I havent been able to find what specific ISO I need. Would Windows Server 2019 Datacenter (1809) suffice? Or do I specifically need 17763.5576. Because I havent been able to find that yet.

Update now requires restart so I will reboot asap.

So was I close? With the certocm and winsqlite being corrupt? Is there any way I could have fixed this myself? I tried a 1000 variants of mounting iso's and using DISM but they all gave me the source not found error. I struggle to see how I could have fixed this myself even though I kind of knew what the problem was

 

[Maxstar]

Great, let me know the result after the reboot.

Yes, you've found the corrupted or missing files, but they are not a part of a specific ISO, those files are a part of an LCU (Last Cumulative Update) which is KB5034127 in this case.
See also this public tutorial how to fix such kind of issues.

 

[davyraitt]

Great, let me know the result after the reboot.

Yes, you've found the corrupted or missing files, but they are not a part of a specific ISO, those files are a part of an LCU (Last Cumulative Update) which is KB5034127 in this case.
See also this public tutorial how to fix such kind of issues.

Seems like everything works now! Updates installed succesfully. Thanks

 

[Maxstar]

You're welcome. Then I will mark this thread as solved...