This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(83.2, 8%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
We are using IBCM in our environment(not planning to update to CMG for now) and facing Software Update installation issue for VPN clients. However, application installation is fine on VPN clients. I have checked WSUS port settings(they are fine),Certificates (not expired) and the properties of MP and DP for IBCM site.
While checking the Policy Agent log, it gives below error on one of the machine
ScanCompleteCallback - failed at OnScanComplete with error=0x87d00631
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(150.4, 21%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDV%3C/text%3E%3C/svg%3E)
Hi,
Did you followed the Microsoft Announcement made last month on Patch Tuesday regarding WSUS Security.
Hi Deepak,
As per the article the devices will start to fail post installing the September 2020 cumulative update which is not the case currently. None of the updates are visible in Software Center for clients connected via VPN.
0x87d00631 = "Scan retry is pending"
Have you reviewed wuahandler.log (which is the first log you should always refer to when troubleshooting client-side software update issues)?
@Anonymous
Thank you for posting in Microsoft Q&A forum.
We may check if our WSUS service is running well? We may try to stop and restart the service in WSUS server.
You may refer to the link to see if it helps:
https://social.technet.microsoft.com/Forums/ie/en-US/03428437-772a-4451-aa87-47593b1ba1ce/software-update-not-installing-in-client-windows-10-machine?forum=ConfigMgrCompliance
If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Thanks for the revert.
I have checked the WSUS server and it is up and running. I found two separate issues: a) some VPN connected machines are able to get the updates b) and some VPN connected machines are not able to get the updates. Also, the WSUS connection links(below mentioned) were not accessible in both scenarios
http://supserver.contoso.com:8530/selfupdate/wuident.cab
http://supserver.contoso.com:8530/ClientWebService/wusserverversion.xml
I have checked with N/W team and they have put bandwidth constraint and also 8530 port is not opened for communication which might be the cause that Scan Agent log giving that error.
It seems there is no update for a couple of days. May we know the current status of the problem?
Sorry for the delay in response.
This issue has been fixed by enabling 8530 port for communication.