This guide will help you fix the error code 0x80072F8F-0x20000 that occurs while using the Media Creation Tool for Windows 7/8.
Method 1: Easiest (Windows 7 only)
This covers the Microsoft update that enables support for TLS 1.1 and TLS 1.2 through the package KB3140245. Follow these instructions:
- Download the package KB3140245, but do not run it yet.
- Download the “Easy Fix” executable file from the link provided (direct download) and run it. This fix creates the DefaultSecureProtocols registry value, which is a prerequisite for the Microsoft update.
- Now, run the KB3140245 .msi package that you downloaded in step 1.
- This process will automatically enable TLS 1.1 and TLS 1.2 on your computer.
Method 2: Turn on TLS 1.1 and TLS 1.2 via the registry (Windows 7 & 8)
- Ensure your system is fully updated.
- Open Notepad.
- Copy the following lines into Notepad.
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
“DefaultSecureProtocols”=dword:00000a00
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp]
“DefaultSecureProtocols”=dword:00000a00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
“DisabledByDefault”=dword:00000000
“Enabled”=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
“DisabledByDefault”=dword:00000000
“Enabled”=dword:00000001
- Save the file with a .reg extension – for example, enable_tls.reg.
- Double-click the enable_tls.reg file to apply the settings in the registry. Click Yes when asked to confirm.
- For Windows 7 users, download package KB3140245 (TLS 1.1/1.2 Enabling Update) from Microsoft and install it. This step might not be necessary for Windows 8 users.
- Restart Windows.
Download ready-made registry files
If you prefer to download ready-made registry files, you can download the enable-tls.zip file. Unzip the file and run the included enable_tls.reg file. To revert the settings to the default values for Windows 7/8, run the registry file undo.reg.