QuickBooks Error 12045

Let’s Dive in to see…

How to Fix QuickBooks Error=12045

QuickBooks Update Error · 12xxx Series · Certificate Revocation

How to Fix QuickBooks Error 12045

QuickBooks displays error 12045 when attempting to update QuickBooks or download payroll updates — SSL certificate verification fails during the connection to Intuit's servers.

Error 12045 is a certificate revocation check failure. At QuickFix Bookkeeping, 12045 is distinct from 12037 (SSL protocol negotiation) and 12057 (TLS version): 12045 fires specifically when Windows tries to check whether Intuit's SSL certificate has been revoked — and that revocation check either times out or is blocked by a firewall. Intuit's documented fix is to disable certificate revocation checking in IE Advanced Settings, or to allow the revocation check servers through the firewall.

The QuickFix Bookkeeping Distinction — 12045 vs 12037 vs 12057

12045 — this page

Certificate revocation check times out or is blocked. The SSL handshake works — but the separate CRL/OCSP check to verify the cert isn't revoked fails. Fix: disable revocation check in IE or open firewall for CRL servers.

12037

SSL protocol negotiation fails — SSL 2.0/3.0/TLS version checkboxes misconfigured. The handshake itself fails before certificate checking even begins.

12057

TLS version mismatch — server requires TLS 1.2, IE offers only older versions. Protocol version incompatibility, not a revocation check issue.

What Causes QuickBooks Error 12045?

Firewall Blocking Certificate Revocation Servers

Primary 12045 cause — corporate firewalls often block outbound connections to Microsoft's certificate revocation list (CRL) servers and OCSP responders (crl.microsoft.com, ocsp.msocsp.com). When QB's SSL layer tries to verify Intuit's certificate hasn't been revoked, the check times out and 12045 is reported. Solution: open firewall to CRL/OCSP servers, or disable revocation checking in IE.

IE "Check for Server Certificate Revocation" Enabled

The specific IE Advanced Setting "Check for server certificate revocation" is enabled, and the CRL check is failing. Intuit specifically documents disabling this checkbox as a fix for 12045. INETCPL.CPL → Advanced → uncheck "Check for server certificate revocation" → apply → retry.

Slow or Intermittent Internet Connection

The CRL/OCSP check has a short timeout. On slow connections, the check times out before the revocation list is retrieved, and 12045 is reported. A faster, more stable connection resolves this without any configuration changes.

Proxy Blocking CRL Download

A proxy server blocks the HTTP request to download the certificate revocation list. The SSL handshake for the QB update connection itself may work through the proxy, but the separate CRL download is blocked. Adding CRL server URLs to the proxy's allowlist resolves this.

Outdated Root Certificate Store

Windows' root certificate store doesn't have the current CRL for Intuit's certificate authority. Running Windows Update installs the latest root certificates and CRLs. This resolves 12045 without disabling revocation checking.

DNS Blocking CRL Lookup

DNS filtering (common in corporate or parental control environments) blocks resolution of CRL server hostnames. The CRL check can't proceed and 12045 results. Flushing DNS (ipconfig /flushdns) and temporarily using an unrestricted DNS server confirms this cause.

How to Fix QuickBooks Error 12045

METHOD 1Disable Certificate Revocation Check in IE (Intuit Fix)Intuit-documented primary fix for 12045

Disable revocation check: Windows+R → inetcpl.cpl → Advanced tab → scroll to Security section → uncheck "Check for server certificate revocation" → Apply → OK → restart QB → retry the update. This is Intuit's specific documented fix for 12045.

Also add Intuit to Trusted Sites: INETCPL.CPL → Security → Trusted Sites → Sites → add https://*.intuit.com → Close. Run QB as Administrator → retry. After update succeeds: you can re-enable certificate revocation checking if preferred.

METHOD 2Run Windows Update + Flush DNSOutdated root certificates or DNS blocking CRL

Windows Settings → Update & Security → Check for Updates → install all updates → restart. This updates root certificates and CRLs. Also: Administrator CMD → ipconfig /flushdns → restart QB → retry update as Administrator.

METHOD 3Open Firewall for CRL Servers + Manual UpdateCorporate firewall blocking CRL/OCSP

Work with your IT team to allow outbound connections to: crl.microsoft.com, ocsp.msocsp.com, mscrl.microsoft.com on port 80. These are Microsoft's CRL distribution points. If corporate policy prevents this: download the QB update manually from Intuit's website → install as Administrator (bypasses the automatic SSL-checked download).