0x80072F78 Error: SSL Connection Failure Due to Protocol Mismatch

1. Enable Modern TLS Protocols via Registry

1. Press Win + R, type regedit, and press Enter.
2. Navigate to:
3. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols
4. Create the following keys (if missing):

• TLS 1.1 → Client → DWORD: Enabled = 1
• TLS 1.2 → Client → DWORD: Enabled = 1

1. Restart your PC.

2. Update Root Certificates Manually

• Open Windows PowerShell (Admin) and run:

certutil -generateSSTFromWU RootCAs.sst  

certutil -addstore -f Root RootCAs.sst  

• This command fetches and installs the latest trusted root certificates from Windows Update servers.

3. Reset Cryptographic Key Containers

1. Open Command Prompt (Admin) and type:

certutil -delstore My *

certutil -delstore Root *

1. Then restart Cryptographic Services:

net stop cryptsvc  

net start cryptsvc  

1. Retry Windows Update.

4. Check and Reset Internet Settings

• Open Internet Options → Advanced Tab → Security Section
• Ensure the following boxes are checked:
• Use TLS 1.1
• Use TLS 1.2
• Use SSL 3.0 (optional for legacy systems)
• Click Apply → OK.

5. Disable SSL Scanning in Antivirus

• Open your antivirus settings.
• Locate the “SSL/HTTPS Scanning” option and disable it temporarily.
• Retry Windows Update, then re-enable it after completion.

6. Run a Dedicated Network Reset

1. Go to Settings → Network & Internet → Status.
2. Scroll down and click Network Reset.
3. Restart your PC once the reset completes.

7. Verify Windows Update Service Dependencies

Ensure dependent services are running properly:

• Open Command Prompt (Admin) and run:

sc config wuauserv start= auto  

sc config bits start= auto  

sc config cryptsvc start= auto  

sc config trustedinstaller start= auto  

net start wuauserv  

net start bits  

net start cryptsvc  

net start trustedinstaller  

• This ensures all essential update services operate with the correct dependencies.

8. Perform a Certificate Store Rebuild (Advanced)

1. Rename the old certificate store:
2. ren %SystemRoot%\System32\catroot2 catroot2.old
3. Run Windows Update again — the store will be recreated automatically with valid certificates.