How to Fix Error Code 0x80072F8F – 0x20000 Fixed 2023

0x80072F8F – 0x20000 error may occur when upgrading windows 10 from windows 7. This error appears when unable to communicate with the required Microsoft servers.

This error occurs because of Transport Layer Security (TLS) protocols in windows 10 and not in windows 7.

To solve this problem, you can use other methods to activate or upgrade Windows.

0x80072F8F – 0x20000

Enable Latest TLS Versions

It is necessary to Enable Latest TLS Versions. Since it cannot connect to these servers automatically, it is necessary to download and install it manually.

0x80072F8F – 0x20000 You can install it by following the steps below.

0x80072F8F – 0x20000 How to do work

1-Make sure you have Service pack 1 installed in Windows 7 or Server 2008 R2, if not, you can install it with this link. https://support.microsoft.com/en-us/windows/install-windows-7-service-pack-1-sp1-b3da2c0f-cdb6-0572-8596-bab972897f61
2-Then search for KB3140245 update from microsoft site. http://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3140245
3-Download the update for your appropriate architecture (x64 or x86) according to your Windows version, but don’t install it now.

4-Then you need to edit the registry.
Open Run by pressing Windows + R keys.
-Type regedit and press Enter to open the Registry Editor.
-Go to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp
-Right-click on an empty space and select New > DWORD (32-bit) Value.

-Set its name to DefaultSecureProtocols
-Double click on it. Check the Hex option and set the Value data to A00 to enable TLS 1.1 and 1.2.

If you have a 64-bit system, go to HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp and add the same registry entry with the same value.
5- You can also run this Microsoft easy fix instead of making these changes one by one. https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi
6- Then you may need to make more registry changes depending on your system. Therefore, it is better to do this just in case.
In Registry Editor navigate to Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols.
Right click on Protocols. Choose New > Key.
registration-protocols-new-key

Set its name to TLS 1.1
Likewise create another key called TLS 1.2 in Protocols.
Create a key Client in both TLS 1.1 and 1.2 by right clicking on these subkeys.
Enter TLS 1.1/Client.
Right click on Client and select New > DWORD (32-bit) Value and set the name to DisabledByDefault.
protocols-tls-client-new-dword

Make sure its value remains 0.
Create another DWORD Enabled with a value of 1 in the client.
Now also enter DisabledByDefault and Enabled in TLS 1.2/Client and set their values to 0 and 1 respectively.

7- Now install the KB3140245 update you downloaded earlier.