This guide will help you fix the error code 0x80072F8F-0x20000 that occurs while using the Media Creation Tool for Windows 7/8.
Method 1: Easiest (Windows 7 only)
This covers the Microsoft update that enables support for TLS 1.1 and TLS 1.2 through the package KB3140245. Follow these instructions:
Download the package KB3140245, but do not run it yet.
Download the "Easy Fix" executable file from the link provided (direct download) and run it. This fix creates the DefaultSecureProtocols registry value, which is a prerequisite for the Microsoft update.
Now, run the KB3140245 .msi package that you downloaded in step 1.
This process will automatically enable TLS 1.1 and TLS 1.2 on your computer.
Method 2: Turn on TLS 1.1 and TLS 1.2 via the registry (Windows 7 & 8)
Ensure your system is fully updated.
Open Notepad.
Copy the following lines into Notepad.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
"DefaultSecureProtocols"=dword:00000a00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001
Save the file with a .reg extension - for example, enable_tls.reg.
Double-click the enable_tls.reg file to apply the settings in the registry. Click Yes when asked to confirm.
For Windows 7 users, download package KB3140245 (TLS 1.1/1.2 Enabling Update) from Microsoft and install it. This step might not be necessary for Windows 8 users.
Restart Windows.
Download ready-made registry files
If you prefer to download ready-made registry files, you can download the enable-tls.zip file. Unzip the file and run the included enable_tls.reg file. To revert the settings to the default values for Windows 7/8, run the registry file undo.reg.