How to Fix Fix Error 0x80096004 — Windows Update Trust/Certificate Failure on Windows
Getting error 0x80096004 during Windows Update? "The signature of the certificate cannot be verified" or update trust failure? Fix this certificate validation error.
📖
Main Troubleshooting Guide
How to Fix Windows Update Errors →Complete symptoms, causes, and step-by-step solutions
Symptoms
You might be experiencing this problem if you notice:
- •Windows Update fails with error 0x80096004
- •"The signature of the certificate cannot be verified"
- •Cumulative updates download but fail at verification step
- •Error appears after system date/time change
- •Only certain updates fail while others install fine
- •Error in CBS log: TRUST_E_CERT_SIGNATURE
Common Causes
- ⚠Root certificate store corrupted or outdated
- ⚠System date/time incorrect causing certificate validation failure
- ⚠Windows Update catalog cache corrupted
- ⚠Group Policy restricting certificate trust
- ⚠Antivirus SSL inspection interfering with update verification
- ⚠Corrupted cryptographic service DLLs
Solutions
Solution 1: Fix Certificate Store
- 1First verify date/time is correct:
- 2Settings → Time & language → Date & time → Sync now
- 3Update root certificates: CMD as Admin:
- 4certutil -generateSSTFromWU roots.sst
- 5If that fails: open Internet Explorer (not Edge) → Internet Options
- 6Advanced tab → under Security: ensure "Check for server certificate revocation" is checked
- 7Also check "Check for publisher's certificate revocation"
- 8Click "Restore advanced settings" → Apply → OK
Solution 2: Re-Register Cryptographic DLLs
- 1CMD as Admin — run each line:
- 2regsvr32 softpub.dll
- 3regsvr32 wintrust.dll
- 4regsvr32 initpki.dll
- 5regsvr32 dssenh.dll
- 6regsvr32 rsaenh.dll
- 7regsvr32 gpkcsp.dll
- 8regsvr32 sccbase.dll
- 9regsvr32 slbcsp.dll
- 10regsvr32 cryptdlg.dll
- 11Restart PC and try the update again
Solution 3: Reset Windows Update Trust
- 1CMD as Admin:
- 2net stop wuauserv
- 3net stop cryptsvc
- 4ren C:\Windows\System32\catroot2 catroot2.old
- 5net start cryptsvc
- 6net start wuauserv
- 7The catroot2 folder stores update signatures — recreating it forces re-verification
- 8If still failing: install the update manually from catalog.update.microsoft.com
FIXES THIS IN 5 MINUTES
Fix Fix Error 0x80096004 — Windows Update Trust/Certificate Failure Automatically
RescuePC Toolkit includes 109+ automated repairs that fix this problem with one click. No command line knowledge required.
Download Now - Free TrialNo credit card required • Works on Windows 10 & 11