Server 2008r2 unable to install software or updates or activate the ESU due to corrupt files and digital signature issues

help desk 1 Reputation point
2020-12-04T09:29:52.143+00:00

Our support customer has a legacy Server 2008r2 running an old HR application (this application is going to move to cloudbased next year but the customer needs this server until that happens)

They have been trying to update the server and install Sophos but are getting errors regarding corrupt files and installing anything with a digital signature. They have purchased the ESU but are also unable to activate that due to these issues.

Windows Server Setup
Windows Server Setup
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Setup: The procedures involved in preparing a software program or application to operate within a computer or mobile device.
252 questions
0 comments No comments
{count} votes

4 answers

Sort by: Most helpful
  1. Anonymous
    2020-12-04T13:46:22.627+00:00

    I'd verify system and servicing health by running;
    sfc /scannow

    also system update readiness tool

    https://video2.skills-academy.com/en-us/troubleshoot/windows-server/deployment/fix-windows-update-errors

    Then check for errors in;
    %SYSTEMROOT%\Logs\CBS\CheckSUR.log

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments

  2. help desk 1 Reputation point
    2020-12-04T16:08:00.737+00:00

    Hi DSPatrick

    Thank you for your reply, we have tried the scannow command which returned the below:

    45255-scannow-results.png

    I have asked them if they/we can run the others.
    Regards
    Melissa

    0 comments No comments

  3. Anonymous
    2020-12-04T16:10:14.03+00:00

    Something here may help.
    https://video2.skills-academy.com/en-us/troubleshoot/windows-client/deployment/analyze-sfc-program-log-file-entries

    also check the results of SUR tool here.
    %SYSTEMROOT%\Logs\CBS\CheckSUR.log

    --please don't forget to Accept as answer if the reply is helpful--

    0 comments No comments

  4. Joy Qiao 4,896 Reputation points Microsoft Employee
    2020-12-07T02:51:44.793+00:00

    Hi Melissa,

    Would you create a capture for error message when try to activate ESU?

    Please refer to the link below to check if you have installed the SHA-2 code signing support update and servicing stack update (SSU) under Installation prerequisites.

    Obtaining Extended Security Updates for eligible Windows devices

    After that, activate with command line slmgr /ipk <ESU key> and recheck with slmgr /dlv.

    If issue persists, after upper actions, please provide error message in Command Prompt.

    Bests,

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.