Windows Update Fails with error 80072efe. Looking at get-windowsupdatelog, you see windows unable to access a URL that begins with sls.update.microsoft.com.
If you open https://sls.update.microsoft.com in internet explorer, you this page can't be displayed.
SOLUTION-
Open HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL
Delete Functions key. Reboot.
You're welcome. This took me FOREVER to find.
Information on Exploit-
https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/
Alternate Mitigation-
https://msrc-blog.microsoft.com/2021/03/05/microsoft-exchange-server-vulnerabilities-mitigations-march-2021/
Script to check server-
https://github.com/microsoft/CSS-Exchange/tree/main/Security
Microsooft Safety Scanner-
https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
del /f /q "%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Downloader\qmgr*.dat"
del /f /s /q %SystemRoot%\SoftwareDistribution\*.*
del /f /s /q %SystemRoot%\system32\catroot2\*.*
del /f /q %SystemRoot%\WindowsUpdate.log
net start wuauserv
net start cryptSvc
net start bits
net start msiserver
You cannot register RHEL, you get rhsm.connection.RestlibException: HTTP error (401 - Unauthorized): Service not available, please try again later
subscription-manager register --username your_username --password 'your$password'
subscription-manager attach --auto
To re-register-
Un-register the system :
sudo subscription-manager remove --allsudo subscription-manager unregistersudo subscription-manager clean
Re-register the system :
sudo subscription-manager registersudo subscription-manager refresh
Search for the Pool ID :
sudo subscription-manager list --available
Attach to subscription :
sudo subscription-manager attach --pool=<Pool-ID>
Clean YUM and cache :
sudo yum clean allsudo rm -r /var/cache/yum
Update the resources :
sudo yum upgrade
openssl enc -base64 -d -in Cert.pfx -out converted.pfx
- Open powershell as administrator.
- run qwinsta.exe
- Run rwinstal.exe <session#>
Test TLS on Exchange-
- Download SMTP Console from Socket Labs.
https://www.socketlabs.com/smtp-server-connection-diagnostics-tool/
- Connect to exchange, do "EHLO domain.com", then click startls from the menu.
