How to fix error code 80072EFE

Error 0x80072EFE in Windows Update usually means the connection to Windows Update servers is being interrupted. The documented causes are:

• TLS/cipher suite issues
• Network or proxy configuration issues

Try this in order:

1. Review the Windows Update log
   Check for repeated 80072EFE failures in: %windir%\logs\windowsupdate
2. Check whether Microsoft sites fail while other sites work
   If general internet access works but Microsoft links fail with a TLS-related error, the issue is likely TLS or cipher suite configuration.
3. Verify TLS 1.2 is enabled
   Open an elevated Command Prompt and run:

      reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server
   

   Confirm these values:

      Enabled    REG_DWORD    0x1
      DisabledByDefault    REG_DWORD    0x0
   

   If TLS 1.2 is disabled, change it to 0x1.
4. Check cipher suite configuration
   Look at this registry key: HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002 Ensure at least one of these cipher suites is present:
   • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
   • TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA256
5. Adjust cipher suite order if needed
   Warning: editing the registry can affect secure connectivity system-wide.
   • Press Windows key + R, type regedit, and press Enter.
   • Go to: HKLM\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002
   • If the required cipher suites exist but are low in the list, move them higher.
   • If one is missing, add it manually.
6. Restart the PC
   A restart is required after cipher suite changes.
7. Try Windows Update again
   Open Settings > Update & Security > Windows Update > Check for updates.
8. If this started after policy changes, test for GPO-related SSL settings
   Warning: removing policy-controlled SSL settings can change security behavior. Check for:

      reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\XXXXXXXX"
   

   If present, documented troubleshooting is to delete the contents inside that XXXXXXXX hive/folder to test whether Group Policy is causing the issue.
9. Check network filtering
   If a firewall, proxy, or network appliance is in the path, make sure it is not blocking Microsoft download URLs and that ports 80 and 443 are open.

• Troubleshoot Windows Update error 0x80072EFE with cipher suite configuration
• Troubleshoot Windows Update download errors