| Previous | Next |
| WU_E_METADATA_INTCERT_BAD_TRANSPORT_ENCODING | WU_E_OL_UNEXPECTED |
WU_E_METADATA_CERT_UNTRUSTED
WU_E_METADATA_CERT_UNTRUSTED means Windows Update could not build a trusted chain for a certificate involved in metadata verification. The metadata cannot be accepted until the chain of trust is valid.
What to check
- Check the certificate chain, expiry, revocation status, and the client trust stores for the exact signing source.
- For internal WSUS or third-party update catalogs, distribute the expected publisher and CA certificates through the organization’s approved policy or management process.
- For Microsoft Update metadata, investigate network interception or an unexpected server response rather than importing a certificate manually.
Get-WindowsUpdateLog -IncludeAllLogsMicrosoft: Windows Update security
Microsoft: Certificates and security for Updates Publisher
Microsoft: Get-WindowsUpdateLog
Microsoft: Windows Update error reference
Looking for a different code? Search another status or error code.