Windows Update error 0x80070643, explained and fixed

0x80070643 is ERROR_INSTALL_FAILURE, the generic wrapper thrown when an installer package fails, most often .NET Framework updates and Microsoft Defender platform updates. It appears at the very end of an install, when the package’s own installer (MSI, error 1603 underneath) gives up, and Windows Update reports the wrapper code.

The fix, in order

  1. Restart and retry once. A pending operation or a file briefly in use defeats installers; a clean boot state gives the package its best chance.
  2. Run the specific installer manually. Download the update’s standalone package from the Microsoft Update Catalog and run it directly. The package reports its own, more specific error, and manual installs dodge several Windows Update layer problems.
  3. For .NET Framework update failures, run Microsoft’s .NET Framework Repair Tool. It diagnoses and repairs the .NET installation the update builds on. Afterwards, retry the update.
  4. Temporarily disable third-party antivirus. Installer interception is a leading cause of 1603-class failures. Windows Security remains active during the attempt.
  5. Check free disk space. Updates need working room beyond their own size; keep at least 10 GB free on the system drive for cumulative updates and considerably more for feature updates. Clear the Download cache and old files with Storage Sense or Disk Cleanup if space is tight.
  6. Reset the Windows Update components. In an admin Command Prompt, stop the services: net stop wuauserv, net stop cryptSvc, net stop bits, net stop msiserver. Rename C:\Windows\SoftwareDistribution to SoftwareDistribution.old and C:\Windows\System32\catroot2 to catroot2.old, then restart the four services with net start. This rebuilds the download cache and the update database from scratch.

If it still happens

If a Defender platform update is the one failing, update Windows Security itself first (open it and check for updates inside the app), since the platform must sometimes be at a minimum level to accept the next package. If .NET remains broken after the repair tool, removing and re-adding the .NET feature (Turn Windows features on or off) and then updating is the deeper reset.

Common questions

Why do I only get this on .NET and Defender updates? Most Windows updates are serviced directly by CBS. .NET and Defender platform updates run their own MSI-based installers, and MSI failures surface as this wrapper code. That is also why the manual-installer step works so well here.

Is 0x80070643 dangerous to ignore? A failed security or Defender update leaves protection a step behind, so it is worth fixing rather than hiding. Feature and optional updates failing with this code are less urgent but the same fix list applies.

Related errors

Windows Update error 0x80070020 · Windows Update error 0x80004005 · Windows Update error 0x80070005