Windows Patch KB4489878 failed to install on 2008 Servers

Description

• WIndows Patch KB4489878 fails to install on Windows 2008 server.

We see the following pertaining to the fail.

PatchInstall.log
[132] 2019-04-06 17:18:12,410 <<*>> (2) Install 2019-03 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4489878) OperationResultCode: Failed

[132] 2019-04-06 17:18:12,410 ERROR (2) Failed to install. 2019-03 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4489878). 0x80080005


WindsowUpdate.log
2019-04-06 17:05:34:921 344 295c Report REPORT EVENT: {3FD36881-4055-4001-A050-D4B69C752DF7} 2019-04-06 17:05:29:913-0700 1 182 101 {4F0792E3-3D80-41C3-BC5B-0440B0DF9F20} 200 80080005 <<PROCESS>>: agent.exe Failure Content Install Installation Failure: Windows failed to install the following update with error 0x80080005: 2019-03 Security Monthly Quality Rollup for Windows Server 2008 R2 for x64-based Systems (KB4489878).

Environment

• SolorWinds N-able N-central

Solution

It appears that Microsoft has begun rolling out SHA2 support for 2008/R2 with KB4474419 which was released at the same time as KB4489878 which requires SHA2 support.
The device needs to reboot after KB4474419 is installed before any other patches requiring SHA2 support can be installed.
https://support.microsoft.com/en-us/help/4472027/2019-sha-2-code-signing-support-requirement-for-windows-and-wsus

https://www.bleepingcomputer.com/news/microsoft/windows-server-2008-requires-kb4493730-to-get-future-updates/

https://support.microsoft.com/en-us/help/4493730/servicing-stack-update-for-windows-server-2008-sp2