How to Fix “KB5021089” Security Update Failed to Install?

KB5021089 is a security update for Windows 10, addressing a .NET Framework vulnerability that may lead to remote code execution. Installation issues may occur on certain systems due to third-party program interference with Windows Update.

KB5021089 Windows Update
KB5021089 Windows Update

Since the update is mainly targeted at the .NET framework, there are various ways you can go about installing it, in case the traditional method does not work. In this article, we will show you how to install KB5021089 on your system with a few potential fixes and manual alternatives. 

The KB5021089 update comes in two parts: KB5021089 for .NET version 4.8 and KB5020881 for .NET version 4.8.1. If you see a message saying the update is not applicable, don’t worry. This happens when you’re not using either of these .NET framework versions, so the update is unnecessary.

With that in mind, let’s proceed to successfully install KB5021089.

1. Disable Third-Party Security Program

To address KB5021089 installation failure, first disable third-party security software on your device. This often occurs due to third-party antivirus programs, causing Windows updates to fail.

To proceed with the Windows update, temporarily disable your antivirus program. After the update is installed, re-enable the antivirus without any problems.

Disabled Antivirus
Disabled Antivirus

2. Check Windows Update Services

Another factor to consider is the Windows update services on your system, responsible for downloading and installing updates. Ensure that the Background Intelligent Transfer Service (BITS) and Windows Update services are running in the background.

You can easily do this through the Services window. Follow the instructions below:

  1. First, open the Run dialog box. You can press the Win key + R shortcut to do so.
  2. In the Run box, type in services.msc and press Enter.
    Opening Windows Services
  3. This will open the Services window.
  4. Now, from the list of services, locate the Windows Update service.
    Windows Update Service
    Windows Update Service
  5. Then, double-click on the service and set the Startup type to Automatic.
    Changing Startup Type
    Changing Startup Type
  6. If the service is already running, restart the service by clicking Stop and then Start
  7. Click Apply and hit OK. 
  8. After that, repeat the same process for the Background Intelligent Transfer Service process. 
  9. Finally, check if the update goes through without any trouble. 

3. Manually Install the Latest .NET Framework

You can manually install the latest .NET Framework version on your computer, achieving the same goal as Windows Update KB5021089, which specifically affects the .NET Framework.

There are multiple installation methods available, including using the Windows Features menu for automatic installation or Microsoft’s web installer. We will guide you through both methods.

3.1. Via Windows Features

  1. First, open the Control Panel app by searching for it in the Start Menu.
    Opening Control Panel
    Opening Control Panel
  2. Then, click the Programs option.
    Navigating to Programs
    Navigating to Programs
  3. After that, click the Turn Windows Features on or off option.
    Opening Windows Features
    Opening Windows Features
  4. In the Windows Features menu, select the .NET Framework options and click OK.
    Installing NET Framework
    Installing NET Framework
  5. This will force Windows to automatically install the features on your PC. 

3.2. Via Web Installer

  1. Open the official download page for .NET Framework by clicking here.
  2. Then, select the .NET version 4.8 and 4.8.1 respectively.
    NET Framework Versions
    NET Framework Versions
  3. After that, click the Runtime option for Web Installer.
    Downloading Web Installer
    Downloading Web Installer
  4. Run the downloaded file on your system to go through the installation.

4. Manually Install KB5021089 Update

You can manually download and install Windows updates from the online catalog, including the KB5021089 update.

Follow the instructions below to do this:

  1. First, open the Windows Update Catalog by clicking here.
  2. Then, paste KB5021089 in the search field and click Search.
    Searching for KB5021089 Update
    Searching for KB5021089 Update
  3. From the results shown, click the Download button for the KB5021089 update that corresponds to your PC architecture.
    Downloading KB5021089 Update
    Downloading KB5021089 Update
  4. Finally, run the downloaded file on your system to install the update. 

5. Perform In-Place Upgrade

If other methods fail, consider an in-place upgrade with the KB5021089 update. This will bring your system to the latest Windows version without data loss.

To perform an in-place upgrade:

  1. First, open the official Windows 10 download page from Microsoft by clicking here.
  2. Then, click the Update now option to download the Windows 10 Update Assistant.
    Downloading Windows 10 Update Assistant
    Downloading Windows 10 Update Assistant
  3. Finally, run the downloaded file to open the Windows 10 Update Assistant. 
  4. Wait for the program to check for any available updates and then go through the prompts to complete the process.

You should be able to install the KB5021089 update on your computer with these methods. This is a security update that is essential for your system to ensure it is secure and not exposed to any attacks from the outside. 

ABOUT THE AUTHOR

Hamza Mohammad Anwar


Hamza Mohammad Anwar is an intermediate JavaScript web developer with a focus on developing high-performance applications using MERN technologies. His skill set includes expertise in ReactJS, MongoDB, Express NodeJS, and other related technologies. Hamza is also a Google IT Certified professional, which highlights his competence in IT support. As an avid problem-solver, he recreates errors on his computer to troubleshoot and find solutions to various technical issues.