1. Verify Date and Time Settings
- Go to Settings - Time & Language - Date & Time.
- Enable Set time automatically and Set time zone automatically.
- Restart your PC and retry the update or installation.
2. Enable Cryptographic Services
- Press Win + R, type services.msc, and press Enter.
- Locate Cryptographic Services, Windows Update, and Background Intelligent Transfer Service (BITS).
- Right-click each - Start (if not running) and set Startup type to Automatic.
- Retry the update or installation.
3. Update Root Certificates
Outdated or missing certificates can block validation.
- Open PowerShell (Admin) and run:
certutil -generateSSTFromWU RootCAs.sst
certutil -addstore -f Root RootCAs.sst
- This ensures all trusted root certificates are installed.
4. Run System File Checker (SFC)
Damaged system files may prevent proper cryptographic operations.
- Open Command Prompt (Admin) and execute:
sfc /scannow
- Allow the scan to complete, then restart your computer.
5. Run DISM Tool to Repair Windows Image
If SFC does not resolve the issue, repair the component store.
- Run in Command Prompt (Admin):
DISM /Online /Cleanup-Image /RestoreHealth
- Restart your PC after completion.
6. Temporarily Disable Third-Party Security Software
Antivirus or firewall may interfere with signature verification.
- Temporarily disable antivirus/firewall.
- Retry the update or driver installation.
- Re-enable security software afterward.
7. Re-register Cryptographic DLLs
Corrupted cryptographic libraries can trigger the error.
- Open Command Prompt (Admin) and run:
regsvr32 softpub.dll
regsvr32 wintrust.dll
regsvr32 initpki.dll
regsvr32 dssenh.dll
regsvr32 rsaenh.dll
regsvr32 gpkcsp.dll
regsvr32 sccbase.dll
regsvr32 slbcsp.dll
- Restart your system after re-registering.
8. Check for Unsigned or Tampered Files
- If a specific driver or update triggers the error, verify it is digitally signed.
- Download drivers or updates from official Microsoft or manufacturer sources.
9. Use Windows Update Troubleshooter
Built-in troubleshooting can detect and fix cryptographic or signature issues.
- Go to Settings - System - Troubleshoot - Other troubleshooters.
- Select Windows Update → Run.
- Apply the suggested fixes and restart your PC.