Fix Windows error code: 0x80072F8F-0x20000

In this article, we'll walk you through how to fix the error with the Media Creation Tool (Windows 7/8).

Method 1: Turn on TLS 1.1 and TLS 1.2 via the registry (Windows 7 & 8)

1. Make sure your system is fully up to date.

2. Open Notes.

3. Copy the following lines in the Notepad.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

4. Save the file with a .reg extension - for example, enable_tls.reg.

5. Double-click the enable_tls.reg file to apply the settings in the registry. Click Yes when prompted to confirm.

6. If you are using Windows 7, download the KB3140245 (TLS 1.1/1.2 Enable Update) package from Microsoft and install it. This step may not be needed for Windows 8.

7. Restart Windows.

Download ready-made register files

If you want to download one or more finished registry files, you can download enable-tls.zip. Unzip and run the attached file enable_tls.reg. If you want to restore the setting to the Windows 7/8 defaults, run the registry file undo.reg.

Method 2: Easiest (Only with Windows 7)

The above registry right was created using the Microsoft article Update to enable TLS 1.1 and TLS 1.2 as the default secure protocols in WinHTTP (Update to enable TLS 1.1 and TLS 1.2 as the default secure protocols in WinHTTP).

This article is about the Microsoft update that will enable support for TLS 1.1 and TLS 1.2 via the KB3140245 package. Here are the instructions:

1. Download the package KB3140245. Do not run it yet.

2. Download the executable "Easy Fix" via the link above ( direct download ) and run it. The fix creates the DefaultSecureProtocols registry value which is a prerequisite for Microsoft's update.

3. Now run the KB3140245 .msi package you downloaded in step 1.

4. This will automatically enable TLS 1.1 and TLS 1.2 on your computer.