PENDING Unable to download SCCM servicing updates manifest.cab cant be empty

[Sys-Man]

Hello,
For some reason I am having an issue in downloading either version 2107 or 2111 of config manager form the updates and servicing page. The status reports that the download has started but if I check the dmpdownloader log if have the following errors.


I successfully managed to download 2103 and all its hotfixes yesterday.
I have tried the steps here - https://www.prajwaldesai.com/fix-sccm-update-stuck-downloading-state/ - the versions went from the updates and servicing page, then appeared a few hours later but will still not download.
I have tried all sorts of firewall and internet filtering rules, made sure the server is connecting with TLS.12. tried with HTTPS being decrypted and inspected and without.
I have followed some instructions about installing some missing cipher suites.
All over the above has not worked.

For info, currently running version 2103 site version 5.0.9049.1000 with all hotfixes. Server 2019
If anyone has any pointers or solutions that would be most appreciated.

Thanks

 

[Sys-Man]

I can't view the certificate for the site that SCCM is trying to download the cab file as as soon as i press go to this site anyway it doesn't land on a page, it just downloads the file. However, if I just go to support.microsoft.com, it also doesn't trust it but I can view that certificate if that's any help?

 

[Garth]

I can't view the certificate for the site that SCCM is trying to download the cab file as as soon as i press go to this site anyway it doesn't land on a page, it just downloads the file. However, if I just go to support.microsoft.com, it also doesn't trust it but I can view that certificate if that's any help?
View attachment 4665

So this really look like you are missing a SU that includes the update root Certs.

 

[Sys-Man]

Yeah that might be the case. I haven't managed to get it to install any update since April, that's why I thought upgrading to server 2022 would help but It didn't.
Errors I'm getting for windows update are
KB5012647, KB5012329, KB5015811, KB5012647 are all giving me an error code of 0x800f0922
KB5013941, KB5014692 are giving me an error code of 0x800f0840
Have tried manual installs from the update catalogue, resetting windows update, deleting software distribution folder etc.
Some places are talking about the system reserved partition not being big enough, I have no free space between that and my C: and can't find a decent tool to move the c: along a bit.