| Previous | Next |
| WU_E_METADATA_SIGNATURE_VERIFY_FAILED | WU_E_METADATATRUST_UNTRUSTED_CERTIFICATECHAIN |
WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION
WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION means metadata-signature validation reached certificate-chain verification and failed. It is important to distinguish this from a simple download failure: the client received metadata but could not establish trust in the signing chain.
What to check
- Identify the exact update source and signer from the log before changing any certificate store.
- For internal update services, verify the approved CA and publisher deployment path, including expiry and revocation accessibility.
- For Microsoft-hosted content, investigate proxy interception, TLS inspection, or an unexpected source response instead of importing certificates manually.
Get-WindowsUpdateLog -IncludeAllLogsMicrosoft: Windows Update log files
Microsoft: Windows Update common errors and mitigation
Microsoft: Windows Update error reference
Looking for a different code? Search another status or error code.