How to Fix Fix Error 0x8007048F — Windows Update Service Identity Verification Failed on Windows
Getting Windows error 0x8007048F? Update service identity verification failed? Windows Update authentication error? Service identity token invalid? Update server trust validation failure? Fix error code 0x8007048F.
📖
Main Troubleshooting Guide
How to Fix Windows Update Errors →Complete symptoms, causes, and step-by-step solutions
Symptoms
You might be experiencing this problem if you notice:
- •Windows Update fails with error code 0x8007048F
- •Update service cannot verify server identity
- •Authentication failure during update check
- •Feature updates fail identity validation
- •Windows Update reports trust chain broken
- •Updates fail after certificate or security changes
Common Causes
- ⚠Windows Update service identity tokens corrupted
- ⚠System clock significantly out of sync
- ⚠Root certificate store missing critical certificates
- ⚠SSL/TLS configuration preventing secure connections
- ⚠Proxy intercepting and modifying update traffic
- ⚠Cryptographic service database corrupted
Solutions
Solution 1: Fix Time Sync and Certificate Store
- 1Verify system time is accurate:
- 2Settings → Time & Language → Date & time
- 3Enable "Set time automatically"
- 4Click "Sync now"
- 5Update root certificates:
- 6CMD as Admin:
- 7certutil -generateSSTFromWU roots.sst
- 8certutil -addstore -f Root roots.sst
- 9del roots.sst
- 10Retry Windows Update
Solution 2: Reset Cryptographic Services
- 1Stop crypto services:
- 2CMD as Admin:
- 3net stop cryptsvc
- 4Rename crypto database:
- 5ren C:\Windows\System32\catroot2 catroot2.old
- 6Restart service:
- 7net start cryptsvc
- 8Also reset Windows Update:
- 9net stop wuauserv
- 10rd /s /q C:\Windows\SoftwareDistribution
- 11net start wuauserv
- 12Try checking for updates again
Solution 3: Repair TLS and Network Trust
- 1Reset TLS settings:
- 2Win+R → inetcpl.cpl → Advanced tab
- 3Check: Use TLS 1.2, Use TLS 1.3
- 4Uncheck: Use SSL 3.0
- 5Click Apply
- 6Flush SSL state:
- 7Content tab → Clear SSL state
- 8Check proxy settings:
- 9CMD as Admin:
- 10netsh winhttp show proxy
- 11If unexpected proxy: netsh winhttp reset proxy
- 12Run: sfc /scannow and DISM /Online /Cleanup-Image /RestoreHealth
FIXES THIS IN 5 MINUTES
Fix Fix Error 0x8007048F — Windows Update Service Identity Verification Failed Automatically
RescuePC Toolkit includes 109+ automated repairs that fix this problem with one click. No command line knowledge required.
Download Now - Free TrialNo credit card required • Works on Windows 10 & 11