| Previous | Next |
| WU_E_METADATA_UNSUPPORTED_HASH_ALG | WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION |
WU_E_METADATA_SIGNATURE_VERIFY_FAILED
WU_E_METADATA_SIGNATURE_VERIFY_FAILED means Windows Update could not validate the digital signature attached to update metadata. It is a security failure: the client cannot establish that the metadata is authentic and unchanged.
What to check
- Identify whether the metadata came from Microsoft Update, WSUS, an offline scan package, or a third-party catalog.
- Check the certificate chain, trust stores, time validity, and any preceding transport or parsing errors.
- For WSUS and private catalogs, verify the correct publisher certificate and policy are deployed to clients; do not bypass signature checks.
Get-WindowsUpdateLog -IncludeAllLogsMicrosoft: Windows Update security
Microsoft: Certificates and security for Updates Publisher
Microsoft: Get-WindowsUpdateLog
Microsoft: Windows Update error reference
Looking for a different code? Search another status or error code.