Security Compliance

Error 800B0004 when installing Patch Manager updates

This article describes error 800B0004 that displays in the Windows Update Client when you install updates on a managed computer. The error includes the following message: The subject is not trusted for the specified action.

First published date

10/26/2018 9:11 PM

Last published date

10/26/2018 9:11 PM

Overview

When you install updates, error 800B0004 displays in the Windows Update Client with the following message:

The subject is not trusted for the specified action.

Product section

Patch Manager

Cause

The WSUS certificates are being deployed to the Trusted Root certificate store instead of the Trusted Root and Trusted Publishers certificate stores

See Error 800B0004 when installing Patch Manager updates for additional details.

Resolution

  1. Check the Certificates Store on the client machine with the error.
    1. Open MMC.
    2. Click on File > Add/Remove Snap-in.
    3. Select Certificates and Add.
    4. Select Computer Account, and then click Next.
    5. Click Finish, and then click OK.
    6. Expand the Certificates Module.
    7. Check the Trusted Root and Trusted Publishers stores to confirm they have the WSUS Certificate.
      If it is in one store and not the other, right-click the certificate, go to All tasks and export the certificate.
      You can take the default values during export.
  2. After you export the certificate, go to the appropriate store and right click the certificate.
  3. Go to All Tasks and import the certificate.
  4. Verify that the issue has been resolved and verify that your Group Policy is set up to deploy the certificates to both the Trusted Root and Trusted Publishers store.