QuickBooks Payroll Update Error Guide
How to Fix QuickBooks Error 15311
You went to download a payroll or QuickBooks Desktop update and were stopped by: "QuickBooks could not verify the digital signature for the update file. [Error 15311]"
The phrase "could not verify the digital signature" tells you exactly what broke — and it is more specific than most guides make it appear. At QuickFix Bookkeeping, this is one of the more straightforward 15xxx-series errors to resolve once you understand what digital signature verification actually does and why it fails.
The QuickFix Bookkeeping Distinction
Error 15311 is not a connection error. It is an authentication error — and the fix path is different.
What most guides say
"Check your internet connection." While internet connectivity is involved, most 15311 cases are not caused by a bad connection — they are caused by QuickBooks failing to validate the Intuit digital signature on the update file, which is a certificate or TLS problem, not a bandwidth problem.
What is actually happening
QuickBooks downloads the update file then checks it against Intuit's digital certificate to confirm it has not been tampered with. If the certificate on QBW32.exe is missing or expired, or if TLS settings in Internet Explorer prevent the secure handshake, the verification step fails and 15311 appears — even with a perfect internet connection.
The practical implication: Start with the digital signature certificate fix and TLS settings before touching your firewall or internet settings. That sequence resolves the majority of 15311 cases in under 10 minutes.
What Is QuickBooks Error 15311?
Error code
15311
15xxx-Series · Update Error
Payroll and Desktop updates
What it means
Error 15311 is a runtime error that occurs during QuickBooks Desktop or payroll updates. QuickBooks successfully connects to Intuit's servers and downloads the update file — but then fails at the authentication step, where it checks that the file is genuinely from Intuit by verifying the digital signature on QBW32.exe. If that check fails, QuickBooks refuses to install the update and surfaces 15311.
Your existing data is safe. 15311 blocks updates from installing — it does not alter your company file, payroll records, or existing tax tables. Only the update process is blocked.
15xxx-Series — Where 15311 Fits
15270
Payroll subscription not active
15311
This page — digital signature verification failure
15243
FCS service disabled during update
15241
Payroll update download incomplete
What Causes QuickBooks Error 15311?
🔏
Missing or Expired Digital Signature
The digital signature on QBW32.exe — Intuit's certificate verifying the update file is genuine — is missing, corrupted, or has expired. This is the primary cause in the majority of 15311 cases.
🔒
Incorrect TLS Settings
QuickBooks uses Internet Explorer's TLS settings to establish a secure connection for updates. If TLS 1.2 is disabled or TLS 1.0 is still enabled as the primary protocol, the secure handshake with Intuit's servers fails at the signature verification step.
📅
Incorrect System Date or Time
Digital certificates are time-bound — they have validity periods. If the system clock is set to a wrong date or timezone, Windows considers the Intuit certificate either not yet valid or already expired, and the signature check fails even if the certificate itself is fine.
💿
Corrupted QuickBooks Installation
Core QuickBooks program files — including QBW32.exe itself — are damaged or incomplete from a failed update, malware activity, or an interrupted installation. When the executable is corrupted, its embedded digital signature becomes unreadable.
🛡️
Firewall or Antivirus Interference
Security software intercepts the update download and strips or modifies the downloaded file before QuickBooks can verify it — causing the signature check to fail on a file that would otherwise be valid. Antivirus quarantine of update components is a common variant of this.
🔑
Invalid Payroll Service Key
An incorrect or expired service key prevents QuickBooks from establishing an authenticated session with Intuit's payroll servers — causing the update to fail at verification. This is less common but surfaces more often after subscription renewals where the new key was not entered.
How to Fix QuickBooks Error 15311 — Step by Step
Start with Method 1 — it resolves the majority of 15311 cases. Work through in order if it does not.
METHOD 1
Install the Intuit Digital Signature Certificate
Primary fix — resolves most 15311 cases
This installs or refreshes the Intuit digital certificate on your system — the certificate QuickBooks checks when verifying that an update file is genuinely from Intuit. The process takes under 5 minutes and resolves the majority of 15311 errors immediately.
1
Press the Windows key and type QBW32.exe in the search box. If the file is not found, navigate directly to C:\Program Files\Intuit\QuickBooks [Year] and find QBW32.exe there.
2
Right-click QBW32.exe → Properties → Digital Signatures tab. Confirm Intuit, Inc. is listed in the Signature list. If the list is empty or no Intuit signature appears — the certificate is missing and this is your confirmed cause.
3
Select Intuit, Inc. from the Signature list and click Details → View Certificate → Install Certificate. On the Certificate Import Wizard, choose Local Machine → Next → Place all certificates in the following store → Browse → Trusted Publishers. Click Next → Finish.
4
Restart your computer. Open QuickBooks and attempt the update again. In the majority of 15311 cases the error clears after this certificate installation.
QuickFix tip: If the Digital Signatures tab is missing entirely from QBW32.exe's Properties — the file itself is corrupted and needs to be replaced via a QuickBooks repair install (Method 4). The absence of the tab is different from an empty signature list and points to a deeper installation issue.
METHOD 2
Fix TLS Settings in Internet Explorer
Critical — TLS 1.2 must be enabled
QuickBooks uses Internet Explorer's TLS settings to negotiate secure connections with Intuit's servers. If TLS 1.2 is disabled or TLS 1.0 remains the primary protocol, the secure handshake fails at the point where QuickBooks tries to verify the digital signature. This is the second most common cause of 15311.
1
Open Internet Explorer (even if you do not use it as your browser — QuickBooks reads its settings). Click the gear icon → Internet Options → Advanced tab.
2
Scroll to the Security section. Ensure the following: Use TLS 1.0 — unchecked. Use TLS 1.1 — checked. Use TLS 1.2 — checked. Click Apply → OK.
3
While in Internet Options, also go to the General tab → Browsing history → Delete. Tick Temporary Internet files and Cookies, then click Delete. Cached connection data can sometimes interfere with the TLS handshake.
4
Restart QuickBooks and attempt the update. If the error clears — the TLS configuration was the cause.
METHOD 3
Verify System Date, Time and Payroll Service Key
Quick checks — done in 3 minutes
Two fast checks that are frequently overlooked — an incorrect system clock invalidates any time-bound certificate, and an outdated service key blocks authenticated update sessions.
1
Check date and time: Right-click the clock in the system tray → Adjust date/time. Ensure the date, time, and timezone are all correct. If the clock is wrong by even one day, digital certificate validation fails.
2
Check service key: In QuickBooks, go to Employees → My Payroll Service → Manage Service Key. Verify the Status shows Active. Click Edit, confirm the service key is correct, click Next → Finish to reset the payroll connection.
3
After correcting date/time and re-entering the service key, attempt the payroll update again.
METHOD 4
Repair the QuickBooks Installation
If QBW32.exe is corrupted
If the Digital Signatures tab is missing from QBW32.exe Properties — or if Methods 1–3 have not resolved 15311 — the QuickBooks installation itself has corrupted program files. A repair install replaces them without affecting company data.
1
Open QuickBooks Tool Hub → Installation Issues → QuickBooks Install Diagnostic Tool. Run it and allow it to complete. Restart your computer when done and test the update.
2
If the diagnostic tool does not resolve it — press Windows + R → type appwiz.cpl → find QuickBooks in the list → select Uninstall/Change → Repair. Complete the repair and restart.
3
After repair, return to Method 1 and install the Intuit digital certificate on the freshly repaired QBW32.exe. Then test the payroll update.
METHOD 5
Run Reboot.bat to Re-register QuickBooks Files
For corrupted Windows registry entries
If corrupted Windows registry entries are preventing QuickBooks files from being recognised correctly — the Reboot.bat script re-registers all QuickBooks executable files with Windows without requiring a full reinstall.
1
Close QuickBooks. Right-click the QuickBooks icon on your Desktop → Properties → Open file location. This opens the QuickBooks installation folder.
2
Find Reboot.bat in the folder. Right-click it → Run as administrator. A command prompt window will open and run the re-registration process — wait until it closes automatically.
3
Restart your computer after Reboot.bat completes. Open QuickBooks and attempt the payroll update.
QuickFix tip: Reboot.bat is particularly effective when 15311 appeared immediately after a Windows update — because Windows updates occasionally reset registry associations for third-party applications. Re-registering QuickBooks files restores those associations without touching any company data.
Quick Reference — Which Fix For Your Situation?
| Your situation |
Most likely cause |
Start with |
| 15311 on any payroll or QB update |
Missing digital signature |
Method 1 — install certificate |
| Certificate installed but error persists |
TLS settings incorrect |
Method 2 — fix TLS in IE |
| Error appeared after subscription renewal |
Outdated service key |
Method 3 — verify service key |
| Digital Signatures tab missing from QBW32.exe |
Corrupted installation |
Method 4 — repair install |
| Appeared immediately after a Windows update |
Registry associations reset |
Method 5 — Reboot.bat |
Frequently Asked Questions About Error 15311
Why does QuickBooks use Internet Explorer settings when I use Chrome?
QuickBooks Desktop was built when Internet Explorer was the standard browser, and it uses IE's networking stack — including TLS settings and the trusted certificate store — for all its internet communications, regardless of which browser you use for everyday browsing. This is why fixing TLS in Internet Explorer resolves QuickBooks update errors even though you may never open IE yourself. Microsoft Edge also inherits these settings on modern Windows systems.
Can I continue running payroll while 15311 is blocking updates?
Yes, in most cases — 15311 blocks the update download and installation, but does not disable existing payroll functionality. Your current tax tables remain active and payroll processing continues. However, you are running on outdated tax tables for as long as the error persists, which can result in incorrect withholding calculations if tax rates have changed. Resolve 15311 before the next payroll cycle to ensure compliance.
What is the difference between 15311 and other 15xxx errors like 15270 or 15243?
All 15xxx errors are payroll or update errors, but each points to a different failure point. Error 15270 means the payroll subscription is not active — the fix is account-level. Error 15243 means the Intuit File Copy Service is disabled — the fix is a Windows service. Error 15311 is specifically a digital signature verification failure — the fix is the certificate and TLS settings. Knowing which 15xxx code you have avoids running the wrong fix sequence.
How do I prevent 15311 from recurring?
Three practices prevent most recurrences. Keep Windows fully updated — Microsoft's root certificate updates keep the trusted certificate store current. Ensure TLS 1.2 remains enabled in Internet Explorer's Advanced settings after any Windows update, since some Windows updates reset security settings. Add QuickBooks as a trusted application in your antivirus software so it cannot quarantine or modify update files mid-download. At QuickFix Bookkeeping we check all three of these during any QuickBooks maintenance session.
Related QuickBooks Payroll Update Errors
Payroll Update Still Blocked?
Tax Tables Out of Date.
Let's Fix This Before Payday.
Certified Intuit ProAdvisors · QuickBooks Payroll Specialists
Running payroll on outdated tax tables creates compliance risk. When Error 15311 persists after the standard fixes, it almost always involves a system-level certificate or TLS configuration that needs hands-on diagnosis. At QuickFix Bookkeeping, our certified ProAdvisors resolve payroll update errors daily and get your tax tables current before your next pay run.
Book a Free 30-Minute Consultation
No obligation. Same-day response. Payroll updates restored fast.
