The update applies Safe OS Dynamic Update (KB5034232) to Windows Recovery Environment (WinRE).
It addresses a security vulnerability (CVE-2024-20666) that could bypass BitLocker encryption.
Do note that the update requires 250 MB of free space in the recovery partition.
Failure due to insufficient space will result in an incomplete installation.
In this guide, you’ll learn how to fix error code 0x80070643 on Windows 10 (security update failed; there were some problems installing updates).
How to fix error 0x80070643 on Windows 10
To fix error code 0x80070643 on Windows 10, you need to manually resize your partition.
To do so, you need to open the command prompt as an administrator and run multiple commands.
Search for “Command Prompt” using Windows Search and select “Run as administrator” and run these commands (in bold), one after the other:
- reagentc /info (confirm “Windows RE location” path (the number after “harddisk” and “partition” is the index and partition of WinRE)
- reagentc /disable (disable WinRE)
- diskpart
- list disk
- sel disk<OS disk index>
- list part
- sel part<OS partition index>
- shrink desired=250 minimum=250
- sel part <WinRE partition index>
- delete partition override
- list disk (check partition style—(*) on GPT means GPT, (*) on MBR means MBR)
- For GPT: create partition primary id=de94bba4-06d1-4d40-a16a-bfd50179d6ac, gpt attributes=0x8000000000000001
- For MBR: create partition primary id=27
- format quick fs=ntfs label=”Windows RE tools” (format partition)
- list vol (confirm that the Windows Recovery partition is successfully created)
- exit
- reagentc /enable (re-enable WinRE)
- reagentc /info (confirm WinRE location)
- Try installing the KB5034441 update again
Notes:
After running the command in step 1, you’ll see a Windows RE location like this: \?\GLOBALROOT\device\harddisk1\partition4\Recovery\WindowsRE.
harddisk1 = index of WinRE while partition4 = recovery index of the partition of WinRE.
Replace <OS disk index> with the number after “harddisk” in step 1 (e.g. sel disk 1).
Replace <OS partition index> with the number after “partition” and “primary” type in step 4 (e.g. sel part 3).
Replace <WinRE partition index> with the number after “partition” and “recovery” type in step 1 (e.g. sel part 4).
Further reading
How to Fix KB5034441 Update Not Installing on Windows 10
How to Fix KB5034123 or KB5033920 Update Not Installing on Windows 11
