[Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc 4.

wdjenkins

Member
Joined
Oct 6, 2017
Posts
20
Location
Round Rock, TX
[Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc 4.

I have a fairly important Server 2008 R2 machine (so rebuild from scratch not really how I want to go) that can no longer install the latest Windows Updates. Updates install, the server reboots, and after the updates hit 90% it say its failed and changes roll back and the server reboots again.

I have run the Update Readiness Tool many times in both the .MSU install method and the DISM method. Just running the .MSU left me with 10 un-fixable issues, but the DISM method fixed all but the last 4. In fact when I run the DISM method now, it show no issues even though updates won't install and the .MSU method still shows 4 issues. I have run SFC /SCANNOW with no issues found. I also ran SFCFix and it reports the same last 4 issues. I'm including the SFCFix log, the checkSUR log, and the Windows Event Log error when attempting installs. Also, I have tried installing the uninstallable hot-fixes through both Windows Update method and manually installing each patch separately. I have compared, using BeyondCompare, the manifest (XML) files that it says are "bad" with known good copies from another server and they are exactly the same.

I have tried every fix and method I could find through Google and can't get over this hurdle. I'm hoping someone will have an idea that I haven't tried. Thanks in advance.



=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2017-10-06 09:54


Checking Windows Servicing Packages


Checking Package Manifests and Catalogs


Checking Package Watchlist


Checking Component Watchlist


Checking Packages


Checking Component Store
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8.manifest amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972.manifest x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da.manifest x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310.manifest amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310


Summary:
Seconds executed: 221
Found 4 errors
CSI Manifest Bad XML Total count: 4


Unavailable repair files:
winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8.manifest
winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972.manifest
winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da.manifest
winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310.manifest






View attachment EventLogError.txt
View attachment checkSUR.txt
View attachment SFCFix.txt
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Let's try replacing the manifests again first.

Windows Update Manifest Replacement

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Please download the attached file, Packs.zip and save this to your Desktop.
  2. Right-click on the file and select Extract All...
  3. Tick the box labelled Show extracted files when complete then click Extract
  4. A window will open showing the folder Manifests
  5. Open the Manifests folder and copy the files into the following folder

    C:\Windows\Temp\CheckSur\Winsxs\Manifests

  6. Run the System Update Readiness Tool (SURT) again.
  7. When the SURT finishes installing, copy (Ctrl + C) and paste (Ctrl + V) the contents of the SURT log into your next post please:

    C:\Windows\Logs\CBS\CheckSUR.log

View attachment packs.zip
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Thanks for the fixes. I'm testing them today, and I will update the thread as soon as I know if its fixed or requires more troubleshooting.
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

So far no change in behavior, here is the log results.

=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2017-10-10 15:28


Checking Windows Servicing Packages


Checking Package Manifests and Catalogs


Checking Package Watchlist


Checking Component Watchlist


Checking Packages


Checking Component Store
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8.manifest amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972.manifest x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da.manifest x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da
(f) CSI Manifest Bad XML 0xC0150006 winsxs\Manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310.manifest amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310


Summary:
Seconds executed: 218
Found 4 errors
CSI Manifest Bad XML Total count: 4


Unavailable repair files:
winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8.manifest
winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972.manifest
winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da.manifest
winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310.manifest
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Let's try replacing the files.

SFCFix Script

Warning: this fix is specific to the user in this thread. No one else should follow these instructions as it may cause more harm than good. If you are after assistance, please start a thread of your own.

  1. Download SFCFix.exe (by niemiro) and save this to your Desktop.
  2. Download the file below, SFCFix.zip, and save this to your Desktop. Ensure that this file is named SFCFix.zip - do not rename it.
  3. Save any open documents and close all open windows.
  4. On your Desktop, you should see two files: SFCFix.exe and SFCFix.zip.
  5. Drag the file SFCFix.zip onto the file SFCFix.exe and release it.
  6. SFCFix will now process the script.
  7. Upon completion, a file should be created on your Desktop: SFCFix.txt.
  8. Copy (Ctrl+C) and Paste (Ctrl+V) the contents of this file into your next post for me to analyse please - put [CODE][/CODE] tags around the log to break up the text.

View attachment SFCFix.zip
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

SFCFix version 3.0.0.0 by niemiro.Start time: 2017-10-11 09:51:37.144
Microsoft Windows Server 2008 R2 Service Pack 1 - amd64
Using .zip script file at *****************\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\WINDOWS\winsxs\manifests


Successfully copied file C:\Users\********\AppData\Local\niemiro\Archive\winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8.manifest to C:\WINDOWS\winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_0460b6a7b31b5aa8.manifest.
Successfully copied file C:\Users\********\AppData\Local\niemiro\Archive\winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310.manifest to C:\WINDOWS\winsxs\manifests\amd64_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_04ee2cbccc359310.manifest.
Successfully copied file C:\Users\********\AppData\Local\niemiro\Archive\winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972.manifest to C:\WINDOWS\winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.18833_none_a8421b23fabde972.manifest.
Successfully copied file C:\Users\********\AppData\Local\niemiro\Archive\winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da.manifest to C:\WINDOWS\winsxs\manifests\x86_microsoft-windows-c..graphy-cryptoconfig_31bf3856ad364e35_6.1.7601.23037_none_a8cf913913d821da.manifest.


Successfully restored ownership for C:\WINDOWS\winsxs\manifests
Successfully restored permissions on C:\WINDOWS\winsxs\manifests
PowerCopy:: directive completed successfully.








Successfully processed all directives.






Failed to generate a complete zip file. Upload aborted.




SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2017-10-11 09:54:30.390
Script hash: LkdvjNt2fR2whDMRJgL/kqADCncs5vNwMbeD21yujUw=
----------------------EOF-----------------------
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Looks like the script fixed the remaining errors from the Readiness Check. Now I'm attempting the Windows Updates that have been failing repeatedly to see if this corrected that situation.


=================================
Checking System Update Readiness.
Binary Version 6.1.7601.22471
Package Version 26.0
2017-10-11 09:58


Checking Windows Servicing Packages


Checking Package Manifests and Catalogs


Checking Package Watchlist


Checking Component Watchlist


Checking Packages


Checking Component Store


Summary:
Seconds executed: 924
No errors detected
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Good news is that Update Readiness no longer reports any issues, bad news is that I still can't install these critical updates.
Below are the event log errors I found for the updates themselves and one error related to TrustedInstaller that I thought could be relevant.
Nothing else in event logs indicates any issues that I can discern.


------- Error #1 ----------------------


Log Name: System
Source: Microsoft-Windows-WindowsUpdateClient
Date: 10/11/2017 11:17:59 AM
Event ID: 20
Task Category: Windows Update Agent
Level: Error
Keywords: Failure,Installation
User: SYSTEM
Computer: ********************.com
Description:
Installation Failure: Windows failed to install the following update with error 0x800736b3: Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4040685).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
<EventID>20</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>1</Task>
<Opcode>13</Opcode>
<Keywords>0x8000000000000028</Keywords>
<TimeCreated SystemTime="2017-10-11T17:17:59.537949500Z" />
<EventRecordID>610540</EventRecordID>
<Correlation />
<Execution ProcessID="1320" ThreadID="5448" />
<Channel>System</Channel>
<Computer>********************.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="errorCode">0x800736b3</Data>
<Data Name="updateTitle">Cumulative Security Update for Internet Explorer 11 for Windows Server 2008 R2 for x64-based Systems (KB4040685)</Data>
<Data Name="updateGuid">{20DA7239-2093-4503-A59E-6AD1644AD868}</Data>
<Data Name="updateRevisionNumber">209</Data>
</EventData>
</Event>


------- Error #2 ----------------------


Log Name: System
Source: Microsoft-Windows-WindowsUpdateClient
Date: 10/11/2017 11:17:59 AM
Event ID: 20
Task Category: Windows Update Agent
Level: Error
Keywords: Failure,Installation
User: SYSTEM
Computer: ********************.com
Description:
Installation Failure: Windows failed to install the following update with error 0x800736b3: 2017-10 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4041681).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WindowsUpdateClient" Guid="{945A8954-C147-4ACD-923F-40C45405A658}" />
<EventID>20</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>1</Task>
<Opcode>13</Opcode>
<Keywords>0x8000000000000028</Keywords>
<TimeCreated SystemTime="2017-10-11T17:17:59.537949500Z" />
<EventRecordID>610539</EventRecordID>
<Correlation />
<Execution ProcessID="1320" ThreadID="5448" />
<Channel>System</Channel>
<Computer>********************.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="errorCode">0x800736b3</Data>
<Data Name="updateTitle">2017-10 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4041681)</Data>
<Data Name="updateGuid">{CD0388FD-5ACA-4A13-8417-C28E1D8B7DDA}</Data>
<Data Name="updateRevisionNumber">200</Data>
</EventData>
</Event>


------- Error #3 ----------------------


Log Name: Application
Source: Microsoft-Windows-Winlogon
Date: 10/11/2017 11:00:15 AM
Event ID: 6004
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: ********************.com
Description:
The winlogon notification subscriber <TrustedInstaller> failed a critical notification event.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Winlogon" Guid="{DBE9B383-7CF3-4331-91CC-A3CB16A3B538}" EventSourceName="Wlclntfy" />
<EventID Qualifiers="32768">6004</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-10-11T17:00:15.000000000Z" />
<EventRecordID>57999585</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>********************.com</Computer>
<Security />
</System>
<EventData>
<Data>TrustedInstaller</Data>
<Binary>69060000</Binary>
</EventData>
</Event>
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Also should mention, that I had been able to install other updates (even before fixing the Update Readiness issues). Updates for things like Malicious Software Removal tool, Office updates, Silverlight Updates, and so forth have installed
with no issues. Just major Critical OS related / IE related / .Net related updates fail (and not just these particular ones from today's errors, but the previous versions of these same monthly roll-up types).

error.png
 
Re: [Server2008R2SP1 x64] Can't install WU & "CSI Manifest Bad XML" errors. Surt tdcc

Please zip and upload the CBS log and most recent CBSPersist_{date} cab file to a file sharing service (such as OneDrive, DropBox, SendSpace, etc.), then include the link here.
 

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top