Quick Answer
Windows Update error 0x80070643 usually means Windows could not install an update because update files, system components, Microsoft .NET Framework, Windows Defender definitions, or the recovery partition are not in a healthy state.
Fastest fix: restart your PC, run the Windows Update troubleshooter, reset Windows Update components, then run DISM and SFC. If the failed update is a Microsoft Defender or .NET update, repair that specific component as shown below.
- Restart Windows and try the update again.
- Run the Windows Update troubleshooter.
- Clear the Windows Update cache.
- Repair system files with DISM and SFC.
- Repair .NET Framework if the failed update mentions .NET.
- Install the update manually from Microsoft Update Catalog.
Problem
You may see Windows Update error 0x80070643 in Settings after an update fails with a message such as Install error – 0x80070643 or There were some problems installing updates.
This error is common on both Windows 11 and Windows 10. It can happen with cumulative updates, Microsoft Defender security intelligence updates, .NET Framework updates, and some recovery environment security updates.
Cause
Error 0x80070643 is a general installation failure code. The update package was found, but Windows could not finish installing it.
| Likely cause | When it happens |
|---|---|
| Corrupted Windows Update cache | Update downloads but fails during install |
| Damaged system files | Multiple updates fail repeatedly |
| Broken .NET Framework components | Failed update title includes .NET Framework |
| Microsoft Defender definition issue | Security intelligence update fails |
| Recovery partition is too small | WinRE-related security update fails |
Prerequisites
- Use an administrator account.
- Keep the PC plugged in if it is a laptop.
- Make sure you have at least 10 GB of free space on the Windows drive.
- Temporarily pause third-party antivirus tools if they interfere with updates.
- Create a restore point before using advanced repair commands.
Step-by-step Solution
1. Restart Windows and retry the update
A pending installer or locked update file can trigger Windows Update error 0x80070643. Restart first, even if Windows does not ask you to.
- Open Start.
- Select Power > Restart.
- After Windows starts, open Settings > Windows Update.
- Click Check for updates.
2. Run the Windows Update troubleshooter
The troubleshooter can repair common update service problems automatically.
- Open Settings.
- Go to System > Troubleshoot > Other troubleshooters.
- Find Windows Update.
- Click Run.
- Apply any recommended fixes and restart the PC.
3. Reset Windows Update components
If the update cache is corrupted, clearing it forces Windows to download fresh update files.
Open Command Prompt as Administrator, then run:
net stop wuauserv
net stop cryptSvc
net stop bits
net stop msiserver
ren C:\Windows\SoftwareDistribution SoftwareDistribution.old
ren C:\Windows\System32\catroot2 catroot2.old
net start wuauserv
net start cryptSvc
net start bits
net start msiserverNow go back to Settings > Windows Update and check for updates again.
4. Repair Windows image with DISM
DISM repairs the Windows component store used by Windows Update.
Open Windows Terminal or Command Prompt as administrator and run:
DISM /Online /Cleanup-Image /RestoreHealthWait until it reaches 100%. Do not close the window while it appears stuck; DISM can pause for several minutes.
5. Run System File Checker
After DISM finishes, run SFC to repair protected Windows system files:
sfc /scannowRestart your computer after the scan completes, then try Windows Update again.
6. Fix .NET Framework update failures
If the failed update name includes .NET Framework, repair .NET before trying again.
- Download the official Microsoft .NET Framework Repair Tool from Microsoft.
- Run the tool as administrator.
- Apply the recommended fixes.
- Restart Windows.
- Run Windows Update again.
You can also make sure .NET features are enabled:
- Press Windows + R.
- Type optionalfeatures and press Enter.
- Check .NET Framework 3.5 and .NET Framework 4.8 Advanced Services if required by your apps.
- Click OK and restart.
7. Fix Microsoft Defender update error 0x80070643
If the failed item is a Security Intelligence Update for Microsoft Defender Antivirus, update Defender manually.
Open PowerShell as Administrator and run:
Update-MpSignatureIf that does not work, clear the Defender definition cache:
cd %ProgramFiles%\Windows Defender
MpCmdRun.exe -RemoveDefinitions -All
MpCmdRun.exe -SignatureUpdateRestart and check Windows Update again.
8. Install the failed update manually
Manual installation helps when Windows Update downloads the same package incorrectly.
- Open Settings > Windows Update > Update history.
- Note the failed KB number, such as KB503xxxx.
- Visit the Microsoft Update Catalog.
- Search for the KB number.
- Download the package that matches your Windows version and system type.
- Run the installer and restart Windows.
9. Check whether the failed update is related to WinRE
Some systems show Windows Update error 0x80070643 when a recovery environment security update cannot install because the Windows Recovery Environment partition does not have enough free space.
If the failed update description mentions Windows Recovery Environment or WinRE, first check whether WinRE is enabled:
reagentc /infoIf WinRE is disabled or the recovery partition is too small, resizing partitions may be required. This is an advanced operation. Back up your data before changing partitions, or use Microsoft’s official WinRE update guidance for your exact KB number.
Examples
| Scenario | Best fix to try first |
|---|---|
| Cumulative update fails repeatedly | Reset Windows Update components, then run DISM and SFC |
| .NET update fails with 0x80070643 | Run Microsoft .NET Framework Repair Tool |
| Defender intelligence update fails | Run Update-MpSignature or refresh Defender definitions |
| WinRE security update fails | Check recovery partition and Microsoft KB guidance |
Common Causes
- Incomplete update download.
- Windows Update services are stuck.
- Corrupted files inside the SoftwareDistribution folder.
- Damaged Windows component store.
- Old or broken .NET Framework installation.
- Security software blocking update installation.
- Insufficient recovery partition space for WinRE updates.
Common Mistakes
- Deleting random Windows folders: only rename SoftwareDistribution and catroot2 using administrator commands.
- Stopping updates permanently: pausing updates hides the problem but does not repair it.
- Installing the wrong KB package: always match Windows version, build, and architecture.
- Resizing partitions without backup: WinRE partition changes can cause boot or recovery issues if done incorrectly.
- Running SFC before DISM only: for stubborn update issues, run DISM first, then SFC.
Best Practices
- Keep at least 10 GB of free disk space on the system drive.
- Restart Windows after large cumulative updates.
- Do not interrupt update installation during reboot.
- Use Microsoft Update Catalog only for official update packages.
- Keep device drivers reasonably current, especially storage and chipset drivers.
- Create regular system restore points before major monthly updates.
Verification
After applying the fixes, confirm that Windows Update error 0x80070643 is resolved:
- Open Settings > Windows Update.
- Click Check for updates.
- Install all available updates.
- Open Update history.
- Confirm the failed KB now appears under successfully installed updates.
You can also verify the Windows image health with:
DISM /Online /Cleanup-Image /CheckHealthIf it reports no component store corruption and Windows Update installs normally, the issue is fixed.