Pages

Followers

Fix Windows Update errors by using the DISM or Sys



Fix Windows Update errors by using the DISM or System Update Readiness tool

Applies to: Windows 10Windows 8.1Windows Server 2012 R2 Datacenter 



Symptom


Windows updates and service packs may fail to install if there are corruption errors. For example, an update might not install if a system file is damaged. The DISM or System Update Readiness tool may help you to fix some Windows corruption errors.


Resolution


For Windows 10, Windows 8.1, Windows 8, Windows Server 2012 R2 or Windows Server 2012

To resolve this problem, use the inbox Deployment Image Servicing and Management (DISM) tool. Then, install the Windows update or service pack again.
  1. Open an elevated command prompt. To do this, swipe in from the right edge of the screen, and then tap Search. Or, if you are using a mouse, point to the lower-right corner of the screen, and then click Search. Type Command Prompt in the Search box, right-click Command Prompt, and then click Run as administrator. If you are prompted for an administrator password or for a confirmation, type the password, or click Allow.
  2. Type the following command, and then press Enter.
    It may take several minutes for the command operation to be completed.
    DISM.exe /Online /Cleanup-image /Restorehealth
    Important When you run this command, DISM uses Windows Update to provide the files that are required to fix corruptions. However, if your Windows Update client is already broken, use a running Windows installation as the repair source, or use a Windows side-by-side folder from a network share or from a removable media, such as the Windows DVD, as the source of the files. To do this, run the following command instead:
    DISM.exe /Online /Cleanup-Image /RestoreHealth /Source:C:\RepairSource\Windows /LimitAccess
    Note Replace the C:\RepairSource\Windows placeholder with the location of your repair source. For more information about using the DISM tool to repair Windows, reference Repair a Windows Image.
  3. Type the following command and press Enter.
    It may take several minutes for the command operation to be completed.
    sfc /scannow
  4. Close the command prompt, and then run Windows Update again.
DISM creates a log file (%windir%/Logs/CBS/CBS.log) that captures any issues that the tool found or fixed. %windir% is the folder in which Windows is installed. For example, the %windir% folder is C:\Windows.

For Windows 7, Windows Vista, Windows Server 2008 R2 or Windows Server 2008

To resolve this problem, use the System Update Readiness tool. Then, install the Windows update or service pack again.
  1. Download the System Update Readiness tool.
    Click the download link in the following table that corresponds to the version of Windows that is running on your computer.

    This tool is updated regularly, we recommend that you always download the latest version. Note This tool is not available in every supported language. Check the link below to see if it is available in your language.
    Operating systemDownload link
    x86-based (32-bit) versions of Windows 7 SP1 and Windows 7
    Download icon
     Download the package now.
    x64-based (64-bit) versions of Windows 7 SP1 and Windows 7
    Download icon
     Download the package now.
    x64-based (64-bit) versions of Windows Server 2008 R2 SP1
    Download icon
     Download the package now.
    Itanium-based versions of Windows Server 2008 R2 SP1
    Download icon
     Download the package now.
    x86-based (32-bit) versions of Windows Vista SP2 and Windows Vista SP1
    Download icon
     Download the package now.
    x64-based (64-bit) versions of Windows Vista SP2 and Windows Vista SP1
    Download icon
     Download the package now.
    x86-based (32-bit) versions of Windows Server 2008 SP2
    Download icon
     Download the package now.
    x64-based (64-bit) versions of Windows Server 2008 SP2
    Download icon
     Download the package now.
    Itanium-based versions of Windows Server 2008 SP2
    Download icon
     Download the package now.
  2. Install and run the tool.
    1. Click Download on the Download Center webpage, then do one of the following:
      • To install the tool immediately, click Open or Run, and then follow the instructions on your screen.
      • To install the tool later, click Save, and then download the installation file to your computer. When you're ready to install the tool, double-click the file.
    2. In the Windows Update Standalone Installer dialog box, click Yes.

      Windows Update Standalone Installer dialog box
    3. When the tool is being installed, it automatically runs. Although it typically takes less than 15 minutes to run, it might take much longer on some computers. Even if the progress bar seems to stop, the scan is still running, so don't click Cancel.

      Download and Install updates - The updates are being installed progress window
    4. When you see Installation complete, click Close.

      Download and install Updates - Installation complete
    5. Reinstall the update or service pack you were trying to install previously.
To manually fix corruption errors that the tool detects but can't fixed, see How to fix errors that are found in the CheckSUR.log.

Download the package from Microsoft Update Catalog directly

You can also try to directly download the update package from Microsoft Update Catalog, and then install the update package manually.

For example, you may have problems when you try to install update 3006137 from Windows Update in Windows 7. In this situation, you can download the update package and try to install the update manually. To do this, follow these steps:
  1. Open Microsoft Update Catalog in Internet Explorer.
    Microsoft Update Catalog in Internet Explorer
  2. In the search box, input the update number that you want to download. In this example, input 3006137. Then, click Search.
    Microsoft Update Catalog - Search
  3. Find the update that applies to your operating system appropriately in the search results, and then click Add to add the update to your basket.
    Microsoft Update Catalog
  4. Click view basket to open your basket.
    Microsoft Update Catalog - view basket
  5. Click Download to download the update in your basket.
    Microsoft Update Catalog - your basket
  6. Click Browse to choose a location for the update you are downloading, and then click Continue.
    Microsoft Update Catalog - Download Options
  7. Click Close after the download process is done. Then, you can find a folder that contains the update package in the location that you specified.
  8. Open the folder, and then double click the update package to install the update.

If the Windows update or service pack installed successfully, you are finished. If the problem is not fixed, or if System Update Readiness Tool cannot find the cause, contact us for more help.



More Information


Description of the common corruption errors

The following table lists the possible error code with Windows Update for your reference:
CodeErrorDescription
0x80070002ERROR_FILE_NOT_FOUNDThe system cannot find the file specified.
0x8007000DERROR_INVALID_DATAThe data is invalid.
0x800F081FCBS_E_SOURCE_MISSINGThe source for the package or file not found.
0x80073712ERROR_SXS_COMPONENT_STORE_CORRUPTThe component store is in an inconsistent state.
0x800736CCERROR_SXS_FILE_HASH_MISMATCHA component's file does not match the verification information present in the component manifest.
0x800705B9ERROR_XML_PARSE_ERRORUnable to parse the requested XML data.
0x80070246ERROR_ILLEGAL_CHARACTERAn invalid character was encountered.
0x8007370DERROR_SXS_IDENTITY_PARSE_ERRORAn identity string is malformed.
0x8007370BERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_NAMEThe name of an attribute in an identity is not within the valid range.
0x8007370A
ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUEThe value of an attribute in an identity is not within the valid range.
0x80070057ERROR_INVALID_PARAMETERThe parameter is incorrect.
0x800B0100TRUST_E_NOSIGNATURENo signature was present in the subject.
0x80092003CRYPT_E_FILE_ERRORAn error occurred while Windows Update reads or writes to a file.
0x800B0101CERT_E_EXPIREDA required certificate is not within its validity period when verifying against the current system clock or the time stamp in the signed file.
0x8007371BERROR_SXS_TRANSACTION_CLOSURE_INCOMPLETEOne or more required members of the transaction are not present.
0x80070490ERROR_NOT_FOUNDWindows could not search for new updates.
0x800f0984PSFX_E_MATCHING_BINARY_MISSINGMatching component directory exist but binary missing
0x800f0986PSFX_E_APPLY_FORWARD_DELTA_FAILEDApplying forward delta failed
0x800f0982PSFX_E_MATCHING_COMPONENT_NOT_FOUNDCan not identify matching component for hydration

What does the System Update Readiness Tool do

How to fix errors that are found in the CheckSUR.log

To manually fix corruption errors that the System Update Readiness Tool detects but can't fix, follow these steps:
  1. Open %SYSTEMROOT%\Logs\CBS\CheckSUR.log.
    Note %SYSTEMROOT% is an environment variable that saves the folder in which Windows is installed. For example, generally the %SYSTEMROOT% folder is C:\Windows. 
  2. Identify the packages that the tool can't fix. For example, you may find the following in the log file:
    Summary:

    Seconds executed: 264
    Found 3 errors
    CBS MUM Missing Total Count: 3
    Unavailable repair files:


    servicing\packages\Package_for_KB958690_sc_0~31bf3856ad364e35~amd64~~6.0.1.6.mum
    ...
    In this case, the package that is corrupted is KB958690.
  3. Download the package from Microsoft Download Center or Microsoft Update Catalog.
  4. Copy the package (.msu) to the %SYSTEMROOT%\CheckSUR\packages directory. By default, this directory doesn't exist and you need to create the directory.
  5. Rerun the System Update Readiness Tool.
If you are a technical professional, see How to fix errors found in the CheckSUR.log for a more options on fixing errors in the CheckSUR.log.