Windows 10: Update KB5012170 issue

As the world knows Microsoft update is causing bitlocker issue for many subscribers and there is no way to solve this. I didnt create this bitlocker and in my profile I dont see any bitlocker recovers keys. When I navigate to Manage Bitlocker keys I get "Try a Different URL. We don’t have anything to show you at this link. Try searching for what you want, instead.".What joke is this. Microsoft enabled recovery keys which we dont have access to. And on top of that the only option for us is to reinstall Windows and lose all data. Can someone help of any other workaround apart from trying to reco

:)

 

Windows Update KB5012170 error 0x800f0922

Run the .bat file as instructed but did not solve the issue.




I will now try the Windows Installation Media and see if that helps.

- - - Updated - - -

Issue resolved by creating Windows 10 installation media





and installing Windows 10





Windows Update kb5012170 installed at the first attempt.

 

KB5012170: Security update for Secure Boot DBX: August 9, 2022

Read more: https://support.microsoft.com/en-us/...8-c42bd211bb15

 

KB5012170: Security update for Secure Boot DBX: August 9, 2022 - Install error - 0x800f0922

I've been fighting the same issues all day. KB5012170 fails to install with error 0x800f0922. Looking through C:\Windows\Logs\CBS\CBS.log reveals errors pointing to BitLocker (which is a red herring) and Secure Boot (the real culprit).

I finally got it to install successfully as follows:

1. Open a cmd.exe or powershell.exe window running as Administrator

2. dism.exe /online /cleanup-image /restorehealth

3. sfc /scannow

4. Reboot

5. Manually download the MSU appropriate for your Windows version directly from the Microsoft Update Catalog here: Microsoft Update Catalog

6. Double click the MSU file to install

This still didn't work for me, but it did clean up the CBS store and allowed me to successfully install the August 2022 Cumulative Update. However, manually installing KB5012170 still failed with the same error as Windows Update in Settings: 0x800f0922

Next, I also performed these additional steps:

7. Reboot into UEFI BIOS

8. Enabled Secure Boot (it was disabled in my case) => Note: This alone didn't work for me. I also needed to do the next step.

9. Clear Secure Boot keys (i.e. reset the Secure Boot keys to default factory settings)

10. Save and exit UEFI BIOS

After this, I repeated Steps 1-6 above and the KB5012170 MSU package successfully installed.

Not sure if this will work for everyone, but since KB5012170 updates the Secure Boot Forbidden Signature Database (DBX) in UEFI, clearing the old and potentially stale boot keys and resetting to factory defaults allowed the update to install required changes to DBX.

Motherboard: Asrock Z87 Extreme6/ac