| Previous | Next |
| WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION | WU_E_METADATA_TIMESTAMP_TOKEN_MISSING |
WU_E_METADATATRUST_UNTRUSTED_CERTIFICATECHAIN
WU_E_METADATATRUST_UNTRUSTED_CERTIFICATECHAIN is a more specific metadata-trust error: the signing certificate chain is not trusted by the client. A valid-looking certificate alone is insufficient if its issuer chain or policy is not trusted.
What to verify
- Confirm the update service identity and certificate chain expected by your organization.
- Check whether the failure appears only behind a TLS-inspecting proxy or on clients missing enterprise trust policy.
- For a managed catalog, distribute certificates through the approved management process; do not install unknown roots as a troubleshooting shortcut.
Microsoft: Windows Update log files
Microsoft: Windows Update Agent API
Microsoft: Windows Update error reference
Looking for a different code? Search another status or error code.