How and Why Error 0x80090016 Happens
Error 0x80090016 on Windows 10/11 typically occurs due to certificate validation failures during system updates, driver installations, or boot processes. This error is often linked to corrupted or incompatible security certificates used by Windows components such as the Windows Update service, Secure Boot, or Trusted Platform Module (TPM). It can also arise from hardware drivers that rely on certificate-based authentication for secure communication with system services. The error prevents critical operations like driver signing, update installation, or boot verification, as Windows cannot validate the cryptographic integrity of required components. This issue is commonly triggered by recent OS updates, incompatible third-party drivers, or damaged system files in the Windows registry or file system. Automatic recovery is limited because certificate validation failures require manual intervention to restore trust relationships between system services and hardware modules.
Possible Fixes
Fix 1: Repair System Files Using DISM and SFC
1. Press **Win + X** and select **Command Prompt (Admin)** or **Windows Terminal (Admin)**.
2. Run the command: `DISM /Online /Cleanup-Image /RestoreHealth` and press Enter. Wait for the process to complete.
3. After DISM finishes, run `SFC /SCANNOW` in the same window. This will scan and repair corrupted system files.
4. Restart your PC once both commands finish. This resolves issues caused by damaged system files that may interfere with certificate validation during updates or driver installations.
Fix 2: Update or Reinstall Problematic Drivers via Device Manager
1. Press **Win + X** and select **Device Manager**.
2. Expand the category containing the problematic hardware (e.g., “Display adapters” for graphics drivers). Right-click the device and choose **Update driver**.
3. Select **Search automatically for updated driver software**. If no updates are found, right-click the device again and choose **Uninstall device**, then restart your PC to reinstall the driver.
4. This addresses certificate-related errors in drivers that fail to communicate securely with Windows services during boot or operation.
Fix 3: Reset Network Settings and Trusted Certificates
1. Open **Settings** > **Network & Internet** > **Status** > **Network reset**. Click **Reset now** to restore default network configurations.
2. After resetting, open **Control Panel** > **User Accounts** > **Change User Account Control settings** and set it to “Never notify” temporarily.
3. Navigate to **Settings** > **Apps** > **Apps & features** > **Advanced options** for the Windows Update app, then select **Reset**. This clears cached certificate trust relationships that may be causing validation failures.
How to Prevent 0x80090016 in the Future
Regularly update Windows via **Settings** > **Windows Update** > **Check for updates** to ensure certificate trusts are maintained. Avoid installing unverified third-party drivers; use Device Manager or manufacturer-provided tools instead. Enable **Secure Boot** in BIOS/UEFI settings to prevent unauthorized firmware modifications. Monitor system logs via **Event Viewer** (Windows Logs > System) for early signs of certificate validation issues. Back up critical driver and configuration files using the **System File Checker** tool periodically. If hardware changes are made, verify compatibility with Windows certification requirements before installation.