| Previous | Next |
| WU_E_METADATA_LEAFCERT_BAD_TRANSPORT_ENCODING | WU_E_METADATA_CERT_UNTRUSTED |
WU_E_METADATA_INTCERT_BAD_TRANSPORT_ENCODING
WU_E_METADATA_INTCERT_BAD_TRANSPORT_ENCODING means an intermediate certificate required for metadata verification could not be decoded because its transferred representation was malformed.
What to check
- Inspect whether the response is consistently malformed for all clients or only in one network path.
- Check server-side certificate-chain publishing and synchronization.
- Do not focus only on the local root store: the immediate failure is malformed transport data for an intermediate certificate.
Identify the certificate data that failed to decode
Windows Update metadata integrity diagnostics distinguish leaf-certificate data from a list of intermediate-certificate data hashes and associate the event with an endpoint, service GUID, and revision. For this HRESULT, preserve those identifiers and check whether the same intermediate-certificate representation fails repeatedly for one update source.
The phrase “transport encoding” is important: the failure occurs while decoding the transferred certificate representation used for metadata verification. Reinstalling the update payload is not a direct fix. Compare the response path with a known-good client, especially when a private service, proxy, or content transformation layer sits between WUA and the metadata endpoint.
References
- Microsoft: Windows Update security
- Microsoft: Authenticode digital signatures
- Microsoft: Windows Update error reference
References
- Microsoft: metadata integrity certificate diagnostic fields
- Microsoft Open Specifications: Windows Update Services client-server protocol
Looking for a different code? Search another status or error code.