AstroSkipper

I already knew the alternative way to import certificates using IE but I want to do it in a clear safe way. It was a really long odyssey to find a final solution. I hope it'll work for all of us. Btw I provided links to Windows Update Reset Tool (Script). Have you already looked into? I think it is an interesting tool if problems due to MU occur.

Final fix of error code 0x80072f8f while accessing WU or MU web site @Dave-H, @RainyShadow, @maile3241 and all other interested people, I have definitely solved the problem getting error code 0x80072f8f. I've done a second ProxHTTPSProxy installation just due to testing purpose. I let ProxHTTPSProxy generate a new CA.crt valid until 2032 by deleting old CA.cert file in ProxHTTPSProxy's program folder and opening ProxHTTPSProxy.exe afterwards. Then I installed this root certificate. But it didn't work either. I got error code 0x80072f8f too. I analyzed what had happened and found out it was installed in Trusted Root Certification Authority but for current user only. And that's the cause of the problem. It has to be installed in Trusted Root Certification Authority of local computer anyway. How is it done? Open console by typing mmc, add a snap-in for certificates, then choose for local computer and import your recently generated ProxHTTPSProxy CA certificate to Trusted Root Certification Authority. Finished. First a screenshot of MU using ProxHTTPSProxy along with recently generated ProxHTTPSProxy CA certificate valid until 2032: And here is a screenshot of my Trusted Root Certification Authority - local computer: Hope this will be the final solution to get rid of error code 0x80072f8f forever! PS: More detailed information relating to ProxHTTPSProxy and HTTPSProxy you can find in this article: Kind regards, AstroSkipper

Ok, on the one hand you solved your connection problem using HTTPSProxy and that's fine, but on the other hand 2025 is your deadline of accessing to MU web site. @Dave-H won't help that either because the original provided ProxHTTPSProxy root certificate doesn't work for him accessing to MU web site.

Ok, you have installed the same ProxHTTPSProxy root certificate twice, one for ProxHTTPSProxy itself and one for HTTPSProxy. Is that correct?

So how many ProxHTTPSProxy root certificates do you have installed in your system's Trusted Root Certification Authority? Please have a look and provide a screenshot!

In my system both proxies generated their own root certificates to work with. I do not use the pregenerated root certificate of ProxHTTPSProxy either and both are working flawlessly. Just a reminder!

Just to clarify and to avoid misunderstandings you copied the ProxHTTPSProxy root certificate in HTTPSProxy's program folder to use it there? Are you sure? I can't hardly believe that.

Providing a personal certificate which was generated only for your proxy isn't a good idea due to security reasons. Using this certificate by other people is a security risk for your encrypted connections. And I doubt that the cause of failure was the HTTPSProxy CA certificate only. It was most likely the combination of HTTPSProxy CA.cert and deleting certs in certs subfolder.

So I've been right. You forgot to delete all certificates in certs folder the last time when you had generated a new HTTPSProxy CA certificate. Deleting was the solution. I mentioned that several times in the past. As I told you if one of them works the other has to work too. They are from same source.

Due to your HTTPSProxy failure did you do what I advised you urgently some posts before?: You can' t use both proxies in RAM at the same time. Then another idea. You said you had generated a new HTTPSProxy CA certificate in the past. Did you delete all certificates in certs subfolder of HTTPSProxy's program folder subsequently? If not it won't work at all.

The best is to avoid https links related to MU. This is what most of us use: http://fe2.update.microsoft.com/microsoftupdate/v6/default.aspx?ln=en. If you stuck at installing activex addon check your security settings in Internet Options in your IE. Lower the security level in Internet Zone only! In this thread I've provided a lot of approaches to solve error code 0x80072F8F. Try them! Maybe one of them will work for you. The goal is to figure out why it is working for some of us like me and for others generating the error code 0x80072F8F.

Welcome to the selected members troubleshooting error code 0x80072F8F! Which proxy do you use? If you are using ProxHTTPSProxy you have two choices of config.ini files. The one file is mine: https://www.mediafire.com/file/vr1klatuzjh6v5c/ProxHTTPSProxy_-_config.ini/file., the other is the config.ini of @maile3241: https://msfn.org/board/applications/core/interface/file/attachment.php?id=49135&key=c915b3197ea8b62e406422ccfec16ea4. Each of them is working in their system but they are different. Try them and report if one of them does the trick or not!

In my little guide I already mentioned the problem with Automatic Updates are greyed out: The solution is to delete this registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate

That's a very good question. In my real Windows XP system the MU web site fix is working perfectly too.

And this is just the problem. Some of your statements are confusing. Please clarify! And I know you are running HTTPSProxy in your XP vm but that wasn't what I suggested. Please take time to read and understand what I' ve written and tried to suggest!

Both proxies base upon same source. So both have to work as they do in my system. But you said ProxHTTPSProxy would work. So use it in your host system and configure your vm to access to it only for https as @RainyShadow suggested.

I still have assumed you are using my config file but you said it wouldn' t work for you. Therefore I suggested to modify the mentioned section in this file:

At first avoid running both in RAM. That won't work at all. You have to exit the unused one to use the other. If that doesn't help try modifying this section of config.ini: ### Ignore SSL certificate verify, USE AT YOUR OWN RISK!!! ### Proxy setting still effective [SSL No-Verify] urs.microsoft.com c.microsoft.com* *one.microsoft.com* download.windowsupdate.com cc.dcsec.uni-hannover.de fe2.update.microsoft.com www.update.microsoft.com In your uploaded config file of ProxhttpsProxy you've got only *update.microsoft.com in this section. So disable the other entries related to Microsoft by setting # in front of each line! Maybe it is working for you. In my system I do not need to change anything. This sentence does not make any sense at all. Here my grammatical analysis: "The certificate error photo is of my vm and is enabled because it worked with ProxhttpsProxy". Sorry, no! Please be more accurate in your statements! I only can guess what you mean but I would like to read it.

@maile3241 Is your Windows XP vm activated properly meaning genuine? Afaik you had problems due to validating. Btw check PM on MDL!

Then you can try modifying config.ini of HTTPSProxy. As I told you my provided config file is working perfectly for me but maybe not for you. Or you have a problem with HTTPSProxy's generated HTTPSProxyCA.crt certificate.

Both HTTPSProxy as well as ProxhttpsProxy are working flawlessly in my Windows XP Professional system. If HTTPSProxy doesn't work for you properly then you'll have done something wrong. At first read the included documents and check your installation! @Dave-H has both installed in his system and they are working as expected except successfully accessing to MU web site. I think there is a misconfiguration due to whatever. We haven't found the problem yet. My provided config files are used in my system without any problems.

Of course I told you before. Now I have to work. I will come back later.

Please some more information! Which OS? Did you read the documents how to setup? In your installation went something wrong.

@Dave-H will come home only today! He has been away from home for some days.

Ok, PM via MDL.