Medium Operating Systems ✓ Solution Verified by Community (0+ upvotes)

Error Code 0x80072f8f — Windows 11

Windows Update SSL/TLS date/time mismatch. System clock incorrect or root certificates expired.

✅ 65% úspěšnost
👥 0+ uživatelů ověřilo
📅 Aktualizováno: 2026-08-12
⏱️ 15 min čtení
Oprava založena na komunitních zprávách a expertní analýze. Naposledy ověřeno: 2026-08-12 · Jak ověřujeme opravy
Error Code0x80072f8f
Affected SystemWindows 11 (Microsoft)
DifficultyMedium
Estimated Time15 min
Requires Admin Rights⚠️ Yes

Postup řešení

  1. 1 Right-click the clock in the taskbar and select 'Adjust date and time'.
  2. 2 Ensure 'Set time automatically' is toggled ON. If it's already on, toggle it off and on again to force a resync.
  3. 3 Click 'Sync now' under 'Additional settings' to immediately sync with time.windows.com.
  4. 4 If the time is still wrong, manually set the correct time and date. Then, restart your PC to apply changes.
  5. 5 Press Windows key + R, type 'certmgr.msc', and press Enter. This opens the certificate manager. Expand 'Trusted Root Certification Authorities' and check if any certificates are expired. If you see expired ones, you can delete them, but be careful — it's safer to let Windows update them automatically.
  6. 6 To update root certificates, go to Settings → Windows Update and check for updates. This will download the latest certificates.
  7. 7 After updating, try Windows Update again.

Alternativní řešení

Metoda 2 (0 upvotes)

  1. First, check your system date and time. Right-click the clock in the taskbar and select 'Adjust date and time'. Ensure 'Set time automatically' is on. If it's off, turn it on. If the time is wrong, toggle 'Set time automatically' off and on, or manually set the correct time and time zone.
  2. If the time is correct, the issue might be with root certificates. Open your web browser and visit a trusted website like https://www.microsoft.com. If you get a certificate warning, your certificates are outdated.
  3. To update root certificates, press Windows key + R, type 'certmgr.msc', and press Enter. This opens the Certificate Manager. Expand 'Trusted Root Certification Authorities' and then 'Certificates'. Look for any certificates that are expired (check the 'Valid to' column).
  4. If you find expired certificates, you can manually download the latest root certificates from Microsoft's Update Root Certificates page (https://support.microsoft.com/en-us/topic/update-to-enable-tls-1-1-and-tls-1-2-as-default-secure-protocols-in-winhttp-in-windows-c4bd73d2-31d7-761e-0178-11268bb10392). However, the easiest fix is to run Windows Update to install the latest updates, which often includes new certificates.
  5. If Windows Update itself is failing, you can use the 'Microsoft Update Catalog' to manually download the latest cumulative update and install it. Search for the latest update for your Windows version, download the .msu file, and double-click to install.
  6. After updating certificates, restart your PC and try Windows Update again.

Metoda 3 (0 upvotes)

  1. First, check your system date and time. Right-click on the clock in the taskbar and select 'Adjust date and time'. Ensure 'Set time automatically' is toggled on. If it's off, turn it on. If the time is wrong, toggle it off, set the correct date and time manually, then toggle it back on.
  2. If the time is correct, you may need to update your root certificates. Open your web browser and go to the Microsoft Update Catalog website (https://www.catalog.update.microsoft.com). Search for 'root certificate update' and download the latest update. Alternatively, you can use Windows Update to install the latest updates, but that's the problem. So, you can manually download the 'Update for Root Certificates' from the Microsoft Download Center.
  3. Another method is to use the 'certutil' command. Open Command Prompt as administrator (Win+R, type 'cmd', press Ctrl+Shift+Enter). Type 'certutil -generateSSTFromWU roots.sst' and press Enter. This downloads the latest root certificates from Windows Update and stores them in a file. Then type 'certutil -addstore -f Root roots.sst' to install them.
  4. After updating certificates, restart your computer to ensure all changes take effect.
  5. If the error persists, check your system's date and time zone settings. Go to Settings → Time & Language → Date & time. Make sure the time zone is correct and that 'Set time zone automatically' is on.
  6. You can also try resetting the Windows Update components using the DISM tool. Open Command Prompt as administrator and run 'DISM /Online /Cleanup-Image /RestoreHealth'. This repairs the system image, which may fix certificate issues.

🔍 Didn't work? Enter your GPU and CPU for hardware-specific advice:

🔧 Stále máte problémy?

Popište svůj přesný problém Error Buddymu a získejte personalizovanou opravu během několika sekund.

🛠️ Vyzkoušet Error Buddy — Zdarma