What does HRESULT 0x80247150 (WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

Windows Update could not verify the trust chain for a metadata-signing certificate.

Previous	Next
WU_E_METADATA_SIGNATURE_VERIFY_FAILED	WU_E_METADATATRUST_UNTRUSTED_CERTIFICATECHAIN

WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION

WU_E_METADATATRUST_CERTIFICATECHAIN_VERIFICATION means metadata-signature validation reached certificate-chain verification and failed. It is important to distinguish this from a simple download failure: the client received metadata but could not establish trust in the signing chain.

What to check

Identify the exact update source and signer from the log before changing any certificate store.
For internal update services, verify the approved CA and publisher deployment path, including expiry and revocation accessibility.
For Microsoft-hosted content, investigate proxy interception, TLS inspection, or an unexpected source response instead of importing certificates manually.

Get-WindowsUpdateLog -IncludeAllLogs

Microsoft: Windows Update log files

Microsoft: Windows Update common errors and mitigation

Microsoft: Windows Update error reference

Looking for a different code? Search another status or error code.