Windows Activation Error 0x80072F8F “A Security Error Occurred”: How to Fix It

Watch on the KRBKeys YouTube channel →

What does error 0x80072F8F mean?

Windows activates over an encrypted (HTTPS) connection. To trust that connection, your PC checks Microsoft’s security certificate, and that check depends on the PC’s clock and on nothing getting in the way. When the check fails, Windows stops with 0x80072F8F, “a security error occurred”.

You usually see it in one of these situations:

• The date, time or time zone is wrong. If the clock is off by more than a few minutes, Microsoft’s certificate looks invalid. This is the most common cause.
• Something is filtering the connection. A VPN, a proxy, or antivirus software that scans HTTPS traffic can break the secure connection.
• Windows is missing updates. Older or long-unpatched installations may lack the certificate and security updates the connection needs.

The same error can also show up in Windows Update or the Microsoft Store, for the same reasons. The fixes below help there too.

Fix 1: Correct the date and time

1. Go to Settings → Time & language → Date & time.
2. Turn on Set time automatically and Set time zone automatically (or pick your time zone by hand).
3. Click Sync now under Additional settings.
4. Try activating again.

Or in Command Prompt as administrator: start the time service with net start w32time, then sync with w32tm /resync.

If the clock goes wrong again after every restart, the small battery on the motherboard (CMOS battery) is probably flat. Replacing it stops the clock from resetting.

Fix 2: Check VPN, proxy and antivirus

1. Disconnect any VPN while you activate.
2. Go to Settings → Network & internet → Proxy and turn off Use a proxy server if you don’t need one.
3. Pause third-party antivirus or firewall software for a moment, or turn off its HTTPS or SSL scanning. Turn it back on after activation.
4. Still failing? Open Command Prompt as administrator and reset the system proxy setting: netsh winhttp reset proxy

On a work or school PC, don’t change proxy settings yourself. Ask your IT team, because the company network may require them.

Fix 3: Install Windows updates

Go to Settings → Windows Update, click Check for updates and install everything offered, then restart. Updates bring the latest security certificates and connection fixes. If Windows Update shows 0x80072F8F as well, do Fix 1 and Fix 2 first.

Fix 4: Activate again

In Settings: go to Settings → System → Activation and click Troubleshoot, or click Change product key and enter your 25-character key.

Or in Command Prompt as administrator:

1. Activate online: slmgr /ato
2. Check the result: slmgr /xpr should say The machine is permanently activated.

Now that the connection works, Windows may show a different error. That new code is the real answer about your key: for example 0xC004C060 (blocked key), 0xC004C008 (key used on another PC) or 0xC004F050 (key doesn’t match the edition). New to these commands? See our guide to activating Windows with CMD.

Fix 5: Activate by phone

If the secure connection still fails, phone activation doesn’t need it:

1. Press Windows + R, type slui 4 and press Enter.
2. Choose your country or region and click Next.
3. Call the number shown, enter the installation ID when asked, and type the confirmation ID you get back into the window. Then click Activate.

Still stuck? Email us at support@krbkeys.com with a screenshot of the error.

Frequently asked questions

Related Guides