Windows & BSOD · medium

How to fix0x800B0109

0x800B0109 - Untrusted Root Certificate Error

What this error means

0x800B0109 - Untrusted Root Certificate Error (0x800B0109) is a medium-severity fault affecting the Windows operating system. A certificate chain processed, but terminated in a root certificate which is not trusted by the trust provider. Commonly occurs during Windows Update downloads, driver installation, or app installation when registry certificates are missing. Common triggers are corrupt cryptographic store components and network proxy SSL redirection interferences. See the troubleshooting steps below for the fix.

Before you begin

Save open work and back up important files. Use instructions for your exact device and software version. If Windows cannot start, see the startup guide.

Work through these checks

0 of 4 complete
01Manually update root certificates in Windows
  1. Manually update root certificates in Windows
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
02Reset cryptographic services folder via Command Prompt
  1. Reset cryptographic services folder via Command Prompt
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
03Run SFC tool to verify system driver directories
  1. Run SFC tool to verify system driver directories
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors
04Configure network credentials to bypass proxy blocks
  1. Configure network credentials to bypass proxy blocks
What to expect

Check whether the original symptom still occurs.

If it does not help

Continue only if this check applies to your device. Consult its manufacturer if you are unsure.

Browse related errors

Possible causes

  • Outdated Windows root certificate database
  • Corrupt cryptographic store components
  • Malicious or self-signed driver certificate override
  • Network proxy SSL redirection interferences