Solved windows11.0-kb5068861 will not install

hapEcat · Nov 30, 2025

In the Update Mgr the KB-5068861 fails to install, multiple times.
Next, I downloaded KB-5068861, trying to install it manually, also resulting in, failure.
I've been dealing with these failures all month.

Is this Security Update corrupted?.... I suspect it is.
The SHA1 & SHA256 Checksums provided by MS look odd:
[windows11.0-kb5068861-x64_acc4fe9c928835c0d44cdc0419d1867dbd2b62b2.msu (SHA1: rMT+nJKINcDUTNwEGdGGfb0rYrI=) (SHA256: wuMX24pCKlLJZraFs7M/z68RhntpE+u4p1fIF2RGkOs=)]

It's that I've never seen SHA Checksums that contained "special characters".

IanMosley · Nov 30, 2025

hapEcat said:
In the Update Mgr the KB-5068861 fails to install, multiple times.]]

No, the update is OK. What error message(s) are you getting?

hapEcat · Nov 30, 2025

I'm running the update again, will get you the code as soon as it finishes.
EDIT: It appears to be hung at 22%.

hapEcat · Nov 30, 2025

IanMosley said:
No, the update is OK.

OAT · Nov 30, 2025

@hapEcat,

Hi, I would download it again. Link from MS Catalog below.
I would also do a reset of the update components before attempting the new install.

Reset Windows Update in Windows 11

This tutorial will show you how to completely reset Windows Update components and policies to default in Windows 10 and Windows 11. Windows Update keeps Windows 11 updated by automatically downloading and installing the latest updates, drivers, and hotfixes released by Microsoft. Sometimes you...

www.elevenforum.com

Microsoft Update Catalog

hapEcat · Nov 30, 2025

This is the error code.

OAT · Nov 30, 2025

hapEcat said:
This is the error code.

So, no hash error anymore?
This is what I would do:

IanMosley · Nov 30, 2025

The error code 0x800f09830 x 800 f 0983 typically signifies an issue with installing a Windows update, often due to corrupted system files or a conflict with update components. To fix it, you can run the Windows Update Troubleshooter, clear the SoftwareDistribution folder, use the sfc and dism commands in Command Prompt, or perform a repair installation.

You can also run 'Reset Windows Update'

hapEcat · Nov 30, 2025

OAT said:
So, no hash error anymore?

Downloaded it multiple times and hash does not match what MS provides for a SHA256....
(SHA256: wuMX24pCKlLJZraFs7M/z68RhntpE+u4p1fIF2RGkOs=)
as I stated earlier, I've never seen special characters in a SHA256 hash.

This ScrnSht is directly from the MS catalog.

Ghot · Nov 30, 2025

@hapEcat

Try downloading and installing the KB5043080 first.
That updates... Windows Update.

If it doesn't install, that's OK. It just means the Windows Update is... up-to-date.

OAT · Nov 30, 2025

hapEcat said:
Downloaded it multiple times and hash does not match what MS provides for a SHA256....
(SHA256: wuMX24pCKlLJZraFs7M/z68RhntpE+u4p1fIF2RGkOs=)
as I stated earlier, I've never seen special characters in a SHA256 hash.

This ScrnSht is directly from the MS catalog.

Sorry, I can't replicate the hash error nor the installation error.

Good luck.

pseymour · Nov 30, 2025

The hashes with equals signs on the end are base64 encoded. I'm not sure why Microsoft is doing that, rather than just posting the hashes like normal humans, but oh well.

KB5068861, for 25H2:

Code:

windows11.0-kb5068861-x64_acc4fe9c928835c0d44cdc0419d1867dbd2b62b2.msu (SHA1: acc4fe9c928835c0d44cdc0419d1867dbd2b62b2) (SHA256: c2e317db8a422a52c966b685b3b33fcfaf11867b6913ebb8a757c817644690eb)
windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu (SHA1: 953449672073f8fb99badb4cc6d5d7849b9c83e8) (SHA256: 819632610a101af11c72907fb13ff05b5fb4222c0e263ee9a03bcc1d1d5f26a4)

hapEcat · Nov 30, 2025

pseymour said:
The hashes with equals signs on the end are base64 encoded. I'm not sure why Microsoft is doing that, rather than just posting the hashes like normal humans, but oh well.

KB5068861, for 25H2:

Code:

windows11.0-kb5068861-x64_acc4fe9c928835c0d44cdc0419d1867dbd2b62b2.msu (SHA1: acc4fe9c928835c0d44cdc0419d1867dbd2b62b2) (SHA256: c2e317db8a422a52c966b685b3b33fcfaf11867b6913ebb8a757c817644690eb) windows11.0-kb5043080-x64_953449672073f8fb99badb4cc6d5d7849b9c83e8.msu (SHA1: 953449672073f8fb99badb4cc6d5d7849b9c83e8) (SHA256: 819632610a101af11c72907fb13ff05b5fb4222c0e263ee9a03bcc1d1d5f26a4)

The hashes you provided match the hash of the downloaded file ... Where ever you got them, they match.
What I want to know is, why weren't they provided in the Update Catalog?

pseymour · Nov 30, 2025

They are provided in the update catalog, sort of. Like I said, they're base64-encoded, and basically no one else on the planet presents hashes that way. Not sure why Microsoft is doing so, but I just converted the base64-encoded values to usable strings.

Powershell:

([string](([System.Convert]::FromBase64String('gZYyYQoQGvEccpB/sT/wW1+0IiwOJj7poDvMHR1fJqQ=')).ForEach({$_ | Format-Hex}).hexbytes -join $null)).ToLowerInvariant()

hapEcat · Nov 30, 2025

Ghot said:
@hapEcat

Try downloading and installing the KB5043080 first.
That updates... Windows Update.

If it doesn't install, that's OK. It just means the Windows Update is... up-to-date.

It was not applicable to my machine, so it must already be installed.

hapEcat · Nov 30, 2025

If I run the downloaded file from the MS Catalog, I get this...

Ghot · Nov 30, 2025

hapEcat said:
If I run the downloaded file from the MS Catalog, I get this...

In the Taskbar search box, type: winver and hit Enter.

If it looks like this (RED box), then it's already installed.

Helmut · Nov 30, 2025

That has been a problem update for many people, so just wait until Windows updates offers "Windows 11 version 25H2 (repair version)"

That solves it.

For me that was on 19.11.2025, so why it is late for you I don't know, maybe diagnostics sent to MS has delayed it for some reason.
I would give it at least another month.
It produces a Windows.old folder of around 40 GB so make sure you have plenty of free drive space. Plenty of percent counters and multiple restarts but in the end all is good.

View attachment 154947

hapEcat · Nov 30, 2025

Ghot said:
In the Taskbar search box, type: winver and hit Enter.

If it looks like this (RED box), then it's already installed.

View attachment 154946

1st thing I did, and...
Still at 26200.6899

Ghot · Nov 30, 2025

You can also try this. Use... Option Two (ISO method)

Repair Install Windows 11 with an In-place Upgrade

This tutorial will show you how to do a repair install of Windows 11 by performing an in-place upgrade without losing anything. If you need to repair or create a new recovery partition or having problems with the Windows 11 operating system on your PC, and the usual solutions will not fix it...

www.elevenforum.com

You won't lose any programs or files.
Many of us have used the In-Place upgrade to repair Windows Update problems.
An In-Place upgrade only fixes Window's problems.
It won't fix issues caused by 3rd party drivers or programs.

If we're talking about your System one... I have no idea what it will do to your dual boot.
It may not do anything to your dual boot, but I just don't know for sure.

Another option is to give it some time like @Helmut mentioned.

I had no problem with KB5068861.

Solved windows11.0-kb5068861 will not install

Well-known member

My Computers

Windows Insider

My Computer

Well-known member

My Computers

Well-known member

Attachments

My Computers

In the end, it truly does not matter.

My Computers

Well-known member

Attachments

My Computers

In the end, it truly does not matter.

My Computers

Windows Insider

Attachments

My Computer

Well-known member

Attachments

My Computers

Well-known member

My Computers

In the end, it truly does not matter.

My Computers

putting the mental back in experimental

My Computer

Well-known member

My Computers

putting the mental back in experimental

My Computer

Well-known member

My Computers

Well-known member

Attachments

My Computers

Well-known member

My Computers

Well-known member

My Computer

Well-known member

My Computers

Well-known member

My Computers

Similar threads