Gotta love Windows 10 updates...

[cSg|mc-Hotsauce]

Windows 10 22h2 security update [KB5034441] fails to install with code: 0x80070643

https://answers.microsoft.com/en-us/windows/forum/all/windows-10-22h2-security-update-kb5034441-fails-to/0848f288-d781-44cc-acf5-dcd8fc6eff27

It fails because of the WindowsRE partition being to small even though the size was managed by Windows when it was installed.

This is getting annoying.

[plat]

I'm still debating whether to mess with the partitions on here. . What you have to do is create a Recovery partition that's around 800 MB now. This is for a BitLocker vulnerability. If you don't need BitLocker, then it's of dubious value.

Think I'll give it another few days. Then again, I don't want this splotch of a failed update to keep turning up in Windows Update But since I only have one installed internal drive, I'm not in a rush to mess with anything.

Edited to correct some text--the update is for a BitLocker bypass.

[Illusion of Progress]

The same happened for me. I increased the size of mine.

https://support.microsoft.com/en-us/topic/kb5028997-instructions-to-manually-resize-your-partition-to-install-the-winre-update-400faa27-9343-461c-ada9-24c8229763bf

[Crashed]

You can use this to grow your recovery partition: https://www.partitionwizard.com/
You may be able to shrink your data partition in Disk Management enough for the resized recovery partition to fit.
You only need the free version.

[Angry Gandalf]

I'm waiting for Microsoft to fix it.
Not doing ANYTHING manually.

[Phénomènes Mystiques]

Seemingly I am 1MB too low. 🙃

[Léon Scarlet]

I remember having this error, i had to reinstall a fresh copy of windaube (wincrap in english) to make it work again

No problem on windows 11 tough

[Phénomènes Mystiques]

Nguyên văn bởi Léon Scarlet:

I remember having this error, i had to reinstall a fresh copy of windaube (wincrap in english) to make it work again

No problem on windows 11 tough

Funny, I have NEVER reinstalled the OS ever since I started using PC's back in the 90's. You must be doing something wrong to have to reinstall this OS.

Bad advice to give people is reinstall the OS unless they have something incurable which is rare in first world countries - if you are not well-known, wealthy, etc...

[udidwht]

https://answers.microsoft.com/en-us/windows/forum/windows_11-wintop_update/install-error-0x80070643/ca8dc95f-bc48-427b-aa6a-3ef468f61ca0?messageId=26bac357-4f6a-4a72-a81f-aafae7cb2fe2

[plat]

I mean, is it even necessary for this BitLocker update for Windows Home versions? Someone posted this observation elsewhere and it hit "home". If you do a brief search, this is what you get. Microsoft, you're annoying!

[Crashed]

Nguyên văn bởi plat:

I mean, is it even necessary for this BitLocker update for Windows Home versions? Someone posted this observation elsewhere and it hit "home". If you do a brief search, this is what you get. Microsoft, you're annoying! :tf2scream:

Home Edition has a cut-down version of BitLocker called Device Encryption, so the components are still there.

[plat]

As far as I know, BitLocker itself is only available on paid versions of Windows. You can use device encryption on all versions, which would include using the trusted platform module v 2.0. So yes, you can use a form of disk encryption in Home version. But this update doesn't seem relevant for Home users from what I'm reading. So Microsoft needs to pull it or release a batch file that does the partition re-sizing for us.

Besides, to successfully bypass BitLocker without KB5034441 installed, one needs physical access to the targeted computer.

[Crashed]

Nguyên văn bởi plat:

As far as I know, BitLocker itself is only available on paid versions of Windows. You can use device encryption on all versions, which would include using the trusted platform module v 2.0. So yes, you can use a form of disk encryption in Home version. But this update doesn't seem relevant for Home users from what I'm reading. So Microsoft needs to pull it or release a batch file that does the partition re-sizing for us.

Besides, to successfully bypass BitLocker without KB5034441 installed, one needs physical access to the targeted computer.

Both use the same drivers. Also, the recovery partition is most likely the same across all editions. Device Encryption uses the BitLocker drivers in a manner that isn't as accessible to the end-user.
When you enable BitLocker for a system drive on Pro or above, unless you have a Group Policy to bypass it, it also uses the TPM to store the encryption key.

The size issue is likely due to how updates get applied to WIM files. Rather than decompressing the WIM to a temporary folder, applying the patches, then recompressing it into a new image, the patches get appended to the WIM then applied on-the-fly when the image is loaded.

Likely there have been a lot of Safe OS updates since the release of v2004, the last complete feature update to Windows 10, and as such the WIM is now bloated with quite a few patches.

[plat]

Nguyên văn bởi Crashed:

the WIM is now bloated with quite a few patches.

Great, just what we need: more bloat migrating to the WinRE like cancer.

Some info published today:

https://www.tomshardware.com/software/windows/microsoft-kb5034441-windows-10-security-patch-for-bitlocker-bypass-is-leading-to-errors-and-has-a-complicated-fix

Some have successfully installed the KB after re-sizing the WinRE. For others, it still failed. The last sentence in the Tom's article is a little reassuring so if you're like me and refuse to risk it, hang on!

[Crashed]

No need for inflammatory language.
If they were to rebuild the WIM from scratch it would be less "bloated."

[Enigmatic]

just expand the partition size. Boot a recovery USB with linux and resize RE partition