Can't update Win11 ( sorry, once more)

Hi there,

I am having issues with Win11 getting updates or download services from M$ and I am in search for the reason.

Using IPFire Core 181,
activated Webproxy as transparent Proxy
- no URL-filter at the moment
- forwarding proxy-address
- forwarding client-ip address
- forwarding username
activated Cache-Manager (emptied several times)
allowed ports
- 80 # http
- 21 # ftp
- 443 # https
- 563 # snews
- 70 # gopher
- 210 # wais
- 1025-65535 # unregistered ports
- 280 # http-mgmt
- 488 # gss-http
- 591 # filemaker
- 777 # multiling http
- 800 # Squids port (for icons)
- 443 # https
- 563 # snews

activated firewall (block all from red coming initiated connections, except teamviewer)

  • allow ALL (ports) outgoing from green to red
    ( - allow port 5938 from red to green (Teamviewer))
  • drop ALL incoming from red to green

In Windows (as written and recommended tried) with and without an entry for the proxy.

Nothing helped, Win11-Updates still end in a “try again to download” and the errorcode 0x80040154. All I found to this errorcode don’t fit to the problem.

I an surf, download from each website, my computer connects to my cloud… all fine, except Windows11 updates.

To avoid, that the windows-experts just have their eyes on the proxy-server only, is it possible, that a misconfiguration of windows cause this problem?

Is there a solution?

Thanks Denise

Sounds like a corrupted win11 installation.

errorcode 0x80040154 means “class not registered” so it looks like windows update cannot initialize the download process because missing system files or registry entries.

Can you test this update in a network without IPFire. I think it will fail also.

run with admin rights
dism /online /cleanup-image /restorehealth
dism /online /cleanup-image /startcomponentcleanup

and try again

@arne_f: I shooted the OS completely down at one PC with a new clean installation, even it was just new fresh installated. But during configuration there are made several settings, which might be a / the problem, I will check them out. Since now, it orders updates and seems to install them. So, we can say it does not look like an IPFire-Problem any more.

@svenf : Tried this on another PC with same update-problem: Yes…seems like something is corrupt.

C:\Windows\System32>dism /online /cleanup-image /restorehealth

Tool zur Imageverwaltung für die Bereitstellung
Version: 10.0.22621.1
Abbildversion: 10.0.22621.2428

Fehler: 0x80040154

Klasse nicht registriert

Die DISM-Protokolldatei befindet sich unter "C:\WINDOWS\Logs\DISM\dism.log".

C:\Windows\System32>dism /online /cleanup-image /startcomponentcleanup

Tool zur Imageverwaltung für die Bereitstellung
Version: 10.0.22621.1
Abbildversion: 10.0.22621.2428

Fehler: 0x80040154

Klasse nicht registriert

Die DISM-Protokolldatei befindet sich unter "C:\WINDOWS\Logs\DISM\dism.log"

Seems like this computer needs a fresh clean install, too. :confused:

You can try this hints or reinstall directly

try to open port TCP 7680

Hi there,

in a fresh and new installed computer I have the same problem. I followed Arne’s recommendation to try it without IPFire an it failed, too! I 've used my mobile for this try and connected it via USB-Cable.

Phil’s suggestion to open TCP 7680 did not help as well, tho I don’t block any ports.

On the totally new installed PC I could solve it with this video https://www.youtube.com/watch?v=uib33Ip8n4M

The other needs a default-setting.

Thanks to all anyways. If you have some more suggestions, even it is not an ipfire-problem, so let me know.

Maybe it’s a good idea of someone who knows well (and much better than me) to explain or link how a windows-update functions. Seems not to be a simple http(s)-connection and a http(s)-download of windows-update-components. The connection to the update-servers seems to be a little more complicated.

Greets and thanks,

Denise