KB5012170 fails to install on 2 Windows Server 2019 1809 servers

Winkler

Winkler

Member
Joined
Sep 29, 2022
Posts
13
So i´ve already tried everything that came into my mind like a complete Windows Update cleanup or manually downloading the update and installing it but sadly nothing helped.
sfc /scannow and dism say everything is fine on both servers.
On server 1 SFCfix and ComponentsScanner say everything is fine too.
On server 2 i had a "Hive is dirty" warning when running ComponentsScanner but no corruptions were detected.
SFCFix also didnt find any corruptions on server 2.
The last time i tried installing the update was on 28.09.2022 at arround 23:10.
I really hope someone can help me with this.
If you need more information just tell me!
Thanks in advance!
 

Attachments

Hi and welcome to Sysnative,

Please start a new thread for server 2, just to avoid that things get mixed up.

Step 1. Download
56f31e53c97da-SFCFix.PNG
SFCFix and save it to your desktop.

Warning: This fix was written specifically for this system. Do not run this fix on another system.
  • Save any work you have open, and close all programs.
  • Download the attachment SFCFix.zip and save it to your desktop.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
6190d993a26f3-SFCFix-Zip-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.


Step 2. Run the System File Checker and post the result.
Code: 
SFC /Scannow
 

Attachments

Hey there!
Thanks for the fix!
So SFCFix ran fine but SFC /scannow sadly said "Windows Resource Protection could not perform the requested operation" at 74%
Im going to open another thread for server 2!
 

Attachments

Hi,

Please upload the COMPONENTS hive of Server 1 in this thread.

Upload your COMPONENTS hive.
  • Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
  • Please copy this file to your desktop.
  • Note: If you receive an error that this file is in-use, simply reboot your computer and try again.
  • Right-click on this file on your desktop and select Send To > Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
  • If the file is too large to upload here, upload the file to www.wetransfer.com and post the link in your next reply.
 
Step 1.
Warning: This fix was written specifically for this system. Do not run this fix on another system.
  • Save any work you have open, and close all programs.
  • Download the attachment SFCFixScript.txt and save it to your desktop.
  • Drag the SFCFixScript.txt file over the SFCFix.exe executable and release it.
62151e1bebac4-SFCFix-Txt-Eng.gif

  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Post the logfile (SFCFix.txt) as attachment in your next reply.


Step 2. Run the System File Checker again and post the result.
Code: 
SFC /Scannow
 

Attachments

Ok so now the result of sfc /scanow was "Windows Resource Protection did not find any integrity violations."
 

Attachments

Hi,

Please try to install the latest update(s), if it fails attach a new copy of the CBS log.
 
I will try to install the update this evening and post the result afterwards!
 
Sadly i got the error "Error 0x800f0922" when installing.
CBS log is attached.
 

Attachments

Hi,

Is the option Secure Boot Enabled on this server, and is BitLocker in use?
 
Last edited:
It seems this is a more common rollback issue, could you please run the following command in an elevated command prompt and post afterwards the BIOS version, and the motherboard type.
Code: 
msinfo32.exe
 
The BIOS version is "EFI Development Kit II / OVMF 0.0.0, 06.02.2015".
Motherboard type is unknown because its a hosted server.
But the hoster is using Virtuozzo KVM.
 
Rich (BB code): 
2022-10-04 22:40:41, Info                  CSI    00000034 The queue has completed running, and AI failures have occured.
2022-10-04 22:40:41, Info                  CSI    00000035 ==Error Summary Start==
2022-10-04 22:40:41, Error                 CSI    00000036 (F) Installer: Secure Boot Installer    Binary Name: securebootai.dll    ErrorCode: 80070057    Phase: 40    Mode: Install (upgrade)    Component: Microsoft-Windows-SecureBoot-FirmwareUpdate, Culture=neutral, PublicKeyToken=31bf3856ad364e35, ProcessorArchitecture=amd64, versionScope=NonSxS[gle=0x80004005]
2022-10-04 22:40:41, Info                  CSI    00000037 ==Error Summary End==
2022-10-04 22:40:41, Info                  CSI    00000038 Rolling back transactions...

2022-10-04 22:40:43, Error                 CBS    Exec: An error occurred while committing the transaction, the transaction has been rolled back. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]
2022-10-04 22:40:43, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x800f0922 - CBS_E_INSTALLERS_FAILED]
2022-10-04 22:40:43, Info                  CBS    WER: Generating failure report for package: Package_for_KB5012170~31bf3856ad364e35~amd64~~17763.3280.1.1, status: 0x800f0922, failure source: Execute, start state: Staged, target state: Installed, client id: WindowsUpdateAgent

This is the related error and is a known problem with KB5012170, so we need to wait Microsoft is rolling out a new release.

Links:
KB5012170: Security update for Secure Boot DBX: August 9, 2022

When attempting to install this update, it might fail to install, and you might receive Error 0x800f0922.

Note This issue only affects this security update for Secure Boot DBX (KB5012170) and does not affect the latest cumulative security updates, monthly rollups, or security-only updates released on August 9, 2022.		This issue can be mitigated on some devices by updating the UEFI bios to the latest version before attempting to install this update.

We are presently investigating and will provide an update in an upcoming release.
 
You're welcome. Please let me know if the next release of this update can be installed without any issues.
 
Once the new release is out i will try to manually download the .msp and install it!
 
Perhaps Microsoft will roll out an out-of-band update for this issue, I will keep an eye on this as well and will post it here....
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top