Volnurability assesment of windows minion returns error: "Module function vman.scan threw an exception. Exception: WinHTTP Send/Receive failed: 0x8024402C"

Products

• VCF Operations/Automation (formerly VMware Aria Suite)
• VMware SaltStack

Issue/Introduction

When running assessment of Windows minion in a dark site, the assessment job return error "Module function vman.scan threw an exception. Exception: WinHTTP Send/Receive failed: 0x8024402C"

Environment

Salt Config 8.17

salt 3006.x

Cause

This error typically indicates a problem with the ability of the minion's Windows Update Agent to connect to the Windows Update server (whether it's Microsoft Update or a local WSUS server). The underlying cause is usually a communication issue related to:

• Network connectivity: The minion may be unable to reach the update server due to network problems.
• Incorrect proxy settings: If the minion is behind a proxy, the proxy settings might be misconfigured or preventing the connection.
• Firewall blocking: The Windows Firewall or other security software might be blocking the WUA connection.
• Corrupted Windows Update components: Less common, but corrupted WUA components can also lead to communication failures.

salt-minion Debug logs reveal the error: 

salt minion_name win_wua.available -l debug

2025-03-12 15:18:42,747 [salt.utils.win_update:411 ][ERROR   ][6504] Search Failed: Unknown Failure: (-2147352567, 'Exception occurred.', (0, None, None, None, 0, -2147012894), None)        Type='Software' or Type='Driver'2025-03-12 15:18:42,747 [salt.minion      :2016][ERROR   ][6504] A command in 'win_wua.available' had a problem: Unknown Failure: (-2147352567, 'Exception occurred.', (0, None, None, None, 0, -2147012894), None)Traceback (most recent call last):  File "C:\Program Files\Salt Project\Salt\Lib\site-packages\salt\utils\win_update.py", line 399, in refresh    results = searcher.Search(search_string)  File "<COMObject CreateUpdateSearcher>", line 2, in Searchpywintypes.com_error: (-2147352567, 'Exception occurred.', (0, None, None, None, 0, -2147012894), None)

Resolution

To resolve this issue, perform the following troubleshooting steps in the order presented. Verify the resolution after each step before proceeding to the next.

1. Validate Network Connectivity:
   • Confirm network path and reachability to the specified Windows Update endpoint (Microsoft Update or internal WSUS server).
   • Utilize standard network diagnostic tools (e.g., ping, tracert) to assess connectivity.
   • Ensure that DNS resolution for the update server hostname is functioning correctly.
2. Evaluate Firewall Configuration:
   • Temporarily disable the Windows Firewall on the affected minion.
   • If the issue is resolved after disabling the firewall, configure a specific inbound and/or outbound rule to permit the necessary Windows Update traffic.
3. Verify WUA Client Configuration (if using WSUS):
   • If a WSUS server is being utilized for updates, ensure that the Salt minion's Group Policy or local policy settings are accurately configured to point to the WSUS server. This involves verifying the UseWUServer and WUServer registry values located under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate.
4. Utilize the Windows Update Troubleshooter:
   • Navigate to Settings > Update & Security > Troubleshoot > Additional troubleshooters (or Settings > System > Troubleshoot > Other troubleshooters on newer Windows versions).
   • Run the Windows Update troubleshooter and follow any on-screen instructions.
5. Engage Microsoft Support for further Troubleshooting. 

Additional Information

• Review the Windows Event Logs (System and Application) on the affected minion for events occurring around the time the wua.scan error was observed.
• Consult the WUAHandler.log file, if applicable (e.g., in environments using Microsoft Endpoint Configuration Manager or Configuration Manager Gateway), for more detailed insights into the WUA client's operation.
• Ensure that the latest Servicing Stack Update (SSU) is installed, as recommended for troubleshooting Windows Update issues.
• Consider running the sfc /scannow command in an elevated Command Prompt to check for and repair corrupted Windows system files.

 

The module queries wua using https://msdn.microsoft.com/en-us/library/windows/desktop/aa386107(v=vs.85).aspx