WSUS Failure - Error Code 80246003

we have approximately 1000 servers in our environment, 29 of them have started failing same error code - 80246003. they're either windows 8 or server 2012 machines.

our wsus server running windows server 2008 r2 sp1 wsus 3.2.7600.256.

we have installed both kb2720211 , kb2734608.

as happening on multiple machines , multiple updates, assume issue our wsus server. have tried local client machine fixes such as:

- stopping wsus, bits , cryptographic services; renaming wsus download folders; starting services up
- re-registering wsus dll's
- restarting client machines
- restarting wsus server
- reinstalling hotfixes listed above
- using wsus troubleshooting tool automatically "fix" error(s)
- installing 1 update @ time

nothing try seems work!

when try download , install updates on client machines, downloads reach 100%, instantly see failure message.

below excerpt 1 of client machines:
2013-03-04    12:54:05:479     808    11cc    dnldmgr    bits job {e110041e-d0c4-4b50-80cd-3e5c31446165} completed successfully
2013-03-04    12:54:05:479     808    11cc    dnldmgr    cupdatedownloadjob::getnetworkcostswitch() neither unrestricted or restricted network cost used, using current cost
2013-03-04    12:54:05:605     808    11cc    misc    validating signature c:\windows\softwaredistribution\download\8dd22c97bdd5dd4599b929bc336fbd14\9c2f30ecd60456234bd9a2e723a9dded7681b95a:
2013-03-04    12:54:05:621     808    11cc    misc     microsoft signed: yes
2013-03-04    12:54:05:621     808    11cc    dnldmgr      download job bytes total = 5265936, bytes transferred = 5265936
2013-03-04    12:54:05:636     808    1728    dnldmgr    ***********  dnldmgr: new download job [updateid = {ea199a45-0a17-4f48-8ca3-35481e2d7472}.102]  ***********
2013-03-04    12:54:05:636     808    1728    dnldmgr    warning: update validation failed, error 80246003.
2013-03-04    12:54:05:636     808    1728    dnldmgr    fatal: dm:cagentdownloadmanager::downloadupdate: pdownloadjob->init failed 0x80246003.
2013-03-04    12:54:05:636     808    1728    dnldmgr    warning: got error (hr = 80246003) starting update 0 in call 207. notifying call.
2013-03-04    12:54:05:636     808    1728    dnldmgr    error 0x80246003 occurred while downloading update; notifying dependent calls.
2013-03-04    12:54:05:636     808    3c4    au    >>##  resumed  ## au: download update [updateid = {514453ad-18df-4347-9d4f-dea5004d216c}]
2013-03-04    12:54:05:636     808    3c4    au      # warning: download failed, error = 0x80246003
2013-03-04    12:54:05:655     808    3c4    au    #########
2013-03-04    12:54:05:655     808    3c4    au    ##  end  ##  au: download updates
2013-03-04    12:54:05:655     808    3c4    au    #############
2013-03-04    12:54:05:670     808    1728    dnldmgr    fatal: dm:cagentdownloadmanager::loadupdatemetadatafromdatastore: getupdates failed 0x80248007.
2013-03-04    12:54:05:670    3456    b2c    wuapp    fatal: failed call getupdatedata updates, hr=80248007, lcid=00000409
2013-03-04    12:54:05:670    3456    b2c    wuapp    warning: failed load update list, error 80248007
2013-03-04    12:54:05:670    3456    b2c    wuapp    warning: failed populate update list error 80248007

the client machines contacting wsus server.

there no errors in wsus server event viewer.

what else try?

-peter

0x80246003

-2145099773

wu_e_dm_unknownalgorithm

file metadata requested unknown hash algorithm

this error, on win8/win2012 systems, being caused because wuagent trying evaluate a sha256 hash on download file , wua can't find one. (e.g. metadata has legacy sha-1 hash, not newer sha256 required wuagent v7.8 ships on win8/win2012).

my guess did not install kb2734608 documented in kb article.

---

lawrence garvin, m.s., mcitp:ea, mcdba, mcsa
solarwinds head geek
microsoft mvp - software distribution (2005-2013)
mvp profile: http://mvp.support.microsoft.com/profile/lawrence.garvin
the views expressed on post mine , not reflect views of solarwinds.

Windows Server  >  WSUS