Windows Update error code 80092004 on Windows Server 2008

Just when I thought that my Windows Update troubles are behind me another issue with a different code appeared.

This time Windows Update error code 80092004 appeared when I have tried to install 2 patches from August 2019 KB4512506 and KB4512486.

None of the usual tasks for troubleshooting Windows Update issues worked so I had to dig further in order to solve this problem. Upon further investigation, I have discovered that Microsoft changed the signing of update packages for Windows 7 SP1 and Windows Server 2008/R2. Error code 80092004 indicates that Windows Update is checking for the SHA-1 package signature, but can’t find one.

According to this document as of March 12, 2019, Microsoft has implemented the requirement for Windows and WSUS to include the SHA-2 updates required for Windows 7 SP1 Windows Server 2008 SP2 and Windows Server R2 SP1.

So, in order to fix this issue, I had to manually install both of the following updates in order to be able to continue installing updates from WSUS / Windows Update.

• Update KB4474419 (This update introduces SHA-2 code sign support for Windows 7 SP1, Windows Server 2008 R2 SP1, and Windows Server 2008 SP2)
• Update KB4490628  (Addresses an issue in the servicing stack when you install an update that has been signed by using only the SHA-2 hash algorithm)

I have also noticed that for some reason on several servers these updates failed to install through WSUS and that was the main culprit of this error code.

Once I have installed the above patches, my problem was finally solved!

It’s also worth saying that some of the users reported that removing Symantec Antivirus from the system fixed the issue after which they were able to install WSUS and Windows Updates.

Hopefully, this article will save a lot of headaches for many of our readers.