question

Lolix2 avatar image
0 Votes"
Lolix2 asked Martin-6754 answered

Server 2019 fails to start after KB4589208. Stop 0xc0000225

edit : I have edited the title because I finally nailed the problem : KB4589208

Hi,

Previously applied update was 2020-10 cumulative updates. Windows update was disabled since.

Now I'm trying to apply the latest updates

After applying them, the server does not start.
Back screen of death : Stop 0xc0000225. A required device is missing... (could be more specific. I guess it is not missing a printer, a cpu etc...)

Booting on a DVD, does not even proposes "repair". The only option I Have is to open a command prompt.
I tried some "bcdedit" tricks to rebuid the boot manager. No way.

I can mount the disk in another VM. chkdsk is OK.
This is absolutely flabbergasting.

Fortunately I had taken a snapshot at the virtualization layer before updating. So I reverted to the snapshot.

Since then, I tried automatic updates several times (on snapshots) over the last few weeks. It consistently fails the same way.

windows-server-2019
· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,

I would like to check if the issue has been fixed? If yes, please help accept answer, so that others meet a similar issue can find useful information quickly. If you have any other concerns or questions, please feel free to feedback.

Best Regards,
Danny

0 Votes 0 ·

Hi,

I would like to check if the issue has been fixed? If yes, please help accept answer, so that others meet a similar issue can find useful information quickly. If you have any other concerns or questions, please feel free to feedback.

Best Regards,
Danny

0 Votes 0 ·
Lolix2 avatar image
0 Votes"
Lolix2 answered Lolix2 edited

Finally found a workaround. Not a solution because, to date, the KB continues to be received by VMs (which is not the case of KB4589212 for Windows 10)

With the help of that tutorial on How to remove a package from the Recovery prompt : https://www.repairwin.com/how-to-remove-updates-from-windows-recovery-environment-winre/

  • Boot in the Recovery mode (Will be automatic if you have the Recovery Partition. Otherwise boot from a DVD)

  • Open a command prompt

  • Get the list of installed package / KBs :

(assuming your Windows installation is accessible through D: That may be another drive in your case

dism.exe /Image:D:\ /get-packages /format:table

  • Remove the kb4589208 package. The command will something like

dism /image:D:\ /Remove-Package /PackageName:Package_for_KB4589208~31bf3856ad364e35.....


  • Exit and reboot







5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

YuhanDeng-MSFT avatar image
0 Votes"
YuhanDeng-MSFT answered

Hi,
I did some research but I didn’t find anything about error code 0xc00000225, instead I found some about 0Xc0000225. I guess this might be a spelling mistake, would you confirm it?
Anyway, I would suggest that you try using a different booting partition. For your reference you can check this method 2 & 5 in this article:
https://www.stellarinfo.com/blog/fix-error-code-0xc0000225-in-windows/
Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Also you can refer to this Microsoft document:
ttps://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/boot-error-status-not-found

Thanks for your time.
Best regards,
Danny


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Lolix2 avatar image
0 Votes"
Lolix2 answered Lolix2 edited

Hi,

(I corrected my post with 0xc0000225)

After a number of attempts (thanks to clones) and many many hours of my working time lost, I found that this boils down to KB4589208.

As soon as it is applied, the VM fails to start.

Looks like KB4589208 is related to Intel CPUs. Maybe wrongly applied to VMs ?

Strangely enough, when I try to install it manually before anything else, it says "This update is not applicable to you computer" ( I suspected it !!!) But if I let Windows Update doing the job, at some point this update is installed and breaks the whole thing.

I mean break. No fix so far.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Lolix,
KB4589208 is actually an intel microcode update, and I‘m not sure if it’s meant for the VMs. This could be the cause.

Thanks for your understanding.
Best regards,
Danny


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·
Lolix2 avatar image
0 Votes"
Lolix2 answered Lolix2 edited

Hi,

Would be great from Microsoft to be sure...
Do you realize the consequences of a server that don't boot and, more worrying, that CAN'T BE FIXED.

I recall that I tried to boot from the DVD to repair and it wouldn't event find a previous Windows installation on that disk. This is flabbergasting.

How can I get the case investigated by Microsoft. ? I can upload a VM (disk in raw format)

BTW How to block a single package ?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Lolix2 avatar image
0 Votes"
Lolix2 answered Lolix2 edited

So,

If you landed here because of a BSOD 0xc0000225 after KB4589208, this is probably too late.
You're bound to restore.
No fix worked for me.

edit 24/06/2021. By chance I have other hypervisors which seems not to be affected by that problem. They have different cpus (see below). Moving VMs to another hypervisor seems to be a workaround to have it start (and then uninstall the KB).

The workaround to prevent this to happen again is to not apply KB4589208. (Or apply as the last and unique update, when all other updates have been applied. This maybe work. It did for me but not always). Anyway keep a snapshot of your valid VM if you can before installing that deadly KB

It means that if you have a bunch of updates in a "pending restart" state, including KB4589208 , you must uninstall it prior to restart. Because Microsoft in its great wisdom doesn't allow you to block a specific update. Great job Microsoft, really great. This Windows 10-flavor of the update Policy proved to be a failure, from the beginning.

Then, after restart, KB4589208 should appear as sole patch left. Applying maybe OK.
I tested the whole process twice, OK. Then I applied the same process on the production server and it failed !! I tried a second time, It has bee OK for two restart. I restarted it again, just to be sure and it failed !!!!!!!

So, my advice it to never ever install KB4589208.

BTW, all my confidence in Windows Update is gone. Again...

· 5
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi Lolix,
Sorry for the bad experience you had. I‘ve reported this issue and hopefully it will be fixed in the later update.

Thanks for your kind feedback.
Best regards,
Danny

0 Votes 0 ·

What do you think of that ?

Snap, from a server who is continuously updated.
This morning (June 21th 2021) I click on "Check for updates" . Guess who is showing up ?. The deadly KB4589208.
Although it apparently had already been installed. (Mind the date...)

Restart went well though.


107503-kb4589208.png


0 Votes 0 ·
kb4589208.png (44.1 KiB)

Hi Lolix,
Maybe the engineers finally got it fixed.
Anyway, please feel free to feedback if there's any other concern.

Thanks for your time.
Best regards,
Danny

0 Votes 0 ·
Show more comments
cheong00 avatar image
0 Votes"
cheong00 answered LaurentDuparchy-3774 commented

From what I understands, these microcode updates should never be directly applied to VMs, just the host machine.

After the host have this update installed, it will be passed to all the guest VMs.

EDIT: Seems it's still recommended to install the update to guest OS for consistency. (Refer to the same link)

So update the host first, then update the guests and see if it gives better result. You may want to use a backup server to perform the test first (also can use it as part of DR drill).


· 10
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.


Now Windows 10 VMs are affected too.... KB4589212

When I start a Windows 10 VM on one hypervisor which has different CPU topology, then I have the deadly stop 0xc0000225. If I start it back on the previous hypervisor then it starts correctly.

If I remove KB4589212 the VM starts well on any hypervisor

Hypervisors Are Oracle VM / Xen

0 Votes 0 ·

Hi Lolix,
For 0xc0000225 maybe this will help:
https://docs.microsoft.com/en-us/troubleshoot/azure/virtual-machines/boot-error-status-not-found

Also since this case is complicated and might need some deeper investigation, I would suggest that you either contact the Oracle for their help, or raise a MS support ticket. In addition, if the issue has been proved as system flaw, the consulting fee would be refund. You may find phone number for your region accordingly from the link below.
Global Customer Service phone numbers:
https://support.microsoft.com/en-us/help/13948/global-customer-service-phone-numbers

Thanks for your understanding.
Best regards,
Danny

0 Votes 0 ·

Hi,

Please someone confirms that those microcode updates should never ever reach a VM ?

After uninstalling KB4589212 on W10, it does not seems to come back

On Windows 2019, KB4589208 keeps coming back over and over .

0 Votes 0 ·
Show more comments

I did other tests

I applying KBKB4589208 on a Windows 2019 running on an hypervisor on top of a Dell Poweredge R630. It failed to boot. I moved it to an hypervisor running on a Dell Poweredge R620 and the boot process was OK. I've seen the "applying patch" and Windows started well.

So, to summarize

KB4589208 & KB 4589212 seems OK with hypervisors running on Dell Poweredge R620 / 2 Intel(R) Xeon(R) CPU E5-2643 v2 @ 3.50GHz

It's NOT OK with Dell Poweredge R630 / 2 Intel(R) Xeon(R) CPU E5-2687W v4 @ 3.00GHz

0 Votes 0 ·
Show more comments
Martin-6754 avatar image
0 Votes"
Martin-6754 answered

Hello,

i think i have the same error. Fujitsu Primergy TX2550 M4 with two Intel Xeon Silver 4116 CPUs and Windows Server 2019 Hypervisor. Installing the KB4589208 an the boot will fail. Then i have to remove it in safe mode and the OS is booting again.

I am in contact with Fujitsu Support but they don't have any good idear. Next step is to disable one of the cpu. But i don't think that will work.

Is there any news regarding this issue?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.