Keytive

This guide will help you fix the error code 0x80072F8F-0x20000 that occurs while using the Media Creation Tool for Windows 7/8.

This covers the Microsoft update that enables support for TLS 1.1 and TLS 1.2 through the package <a href="https://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3140245" rel="nofollow noopener noreferrer" target="_blank">KB3140245</a>. Follow these instructions:

Download the package <a href="https://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3140245" rel="nofollow noopener noreferrer" target="_blank">KB3140245</a>, but do not run it yet.

Download the "Easy Fix" executable file from the link provided (<a href="https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi" rel="nofollow noopener noreferrer" target="_blank">direct download</a>) and run it. This fix creates the DefaultSecureProtocols registry value, which is a prerequisite for the Microsoft update.

Now, run the KB3140245 .msi package that you downloaded in step 1.

This process will automatically enable TLS 1.1 and TLS 1.2 on your computer.

1. Download the package <a href="https://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3140245" rel="nofollow noopener noreferrer" target="_blank">KB3140245</a>, but do not run it yet.
2. Download the "Easy Fix" executable file from the link provided (<a href="https://download.microsoft.com/download/0/6/5/0658B1A7-6D2E-474F-BC2C-D69E5B9E9A68/MicrosoftEasyFix51044.msi" rel="nofollow noopener noreferrer" target="_blank">direct download</a>) and run it. This fix creates the DefaultSecureProtocols registry value, which is a prerequisite for the Microsoft update.
3. Now, run the KB3140245 .msi package that you downloaded in step 1.
4. This process will automatically enable TLS 1.1 and TLS 1.2 on your computer.

Method 2: Turn on TLS 1.1 and TLS 1.2 via the registry (Windows 7 &amp; 8)

1. Ensure your system is fully updated.
2. Open Notepad.
3. Copy the following lines into Notepad.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]

[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]

Save the file with a .reg extension - for example, enable_tls.reg.

Double-click the enable_tls.reg file to apply the settings in the registry. Click Yes when asked to confirm.

For Windows 7 users, download package <a href="https://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3140245" rel="nofollow noopener noreferrer" target="_blank">KB3140245</a> (TLS 1.1/1.2 Enabling Update) from Microsoft and install it. This step might not be necessary for Windows 8 users.

1. Save the file with a .reg extension - for example, enable_tls.reg.
2. Double-click the enable_tls.reg file to apply the settings in the registry. Click Yes when asked to confirm.
3. For Windows 7 users, download package <a href="https://catalog.update.microsoft.com/v7/site/search.aspx?q=kb3140245" rel="nofollow noopener noreferrer" target="_blank">KB3140245</a> (TLS 1.1/1.2 Enabling Update) from Microsoft and install it. This step might not be necessary for Windows 8 users.
4. Restart Windows.

If you prefer to download ready-made registry files, you can download the <a href="https://s3.amazonaws.com/helpscout.net/docs/assets/62bb677cf2377718e5f0e909/attachments/6384ccb21191563224fd4f59/enable-tls.zip" rel="nofollow noopener noreferrer" target="_blank">enable-tls.zip</a> file. Unzip the file and run the included enable_tls.reg file. To revert the settings to the default values for Windows 7/8, run the registry file undo.reg.

Method 1: Easiest (Windows 7 only)

Method 2: Turn on TLS 1.1 and TLS 1.2 via the registry (Windows 7 & 8)

Download ready-made registry files