GlobalProtect HIP patch management fails with error "Opswat Error(-25)"

• HIP Object Patch Management check is enabled on the firewall.
• The collected HIP report in GlobalProtect log has missing entries for patches.

 <entry name="patch-management">
         <list>
                 <entry>
                         <ProductInfo>
                                 <Prod vendor="Microsoft Corporation" name="Windows Update Agent" version="10.0.19041.3031"/>
                                 <is-enabled>yes</is-enabled>
                         </ProductInfo>
                 </entry>
          </list>
           <missing-patches>   
           </missing-patches>               

• PanGpHipMp.log has the message “Opswat Error(-25)”.

(P3120-T6268)Debug( 957): 12/01/22 10:42:05:844 GetMissingPatchInfo (DETECT_PRODUCTS) output: {
    "result" : {
            "detected_products" : [                    
                    {
                        "categories" : [
                                12
                            ],
                        "vendor" : {
                                "name" : "Microsoft Corporation",
                                "id" : 90
                            },
                        "signature" : 1103,
                        "product" : {
                                "name" : "Windows Update Agent",
                                "id" : 1090
                            },
                        "sig_name" : "Windows Update Agent"
                    }
                ],
            "method" : 0,
            "code" : 0,
            "timing" : 73,
            "timestamp" : "1669887725"
        }
}
(P3120-T6268)Debug(2006): 12/01/22 10:42:30:235 Opswat Error(-25): An error when working with Component Object Model (COM): on the Windows
 platform., Method: WAAPI_MID_GET_MISSING_PATCHES, Signature: 1103, Category: 12(PATCH_MANAGEMENT), OESIS (V4 ver: 4.3.3114.0)
(P3120-T6268)Debug(1698): 12/01/22 10:42:30:235 Got missing patches. Size 0.

• GlobalProtect (GP) Client app for Windows
• Supported GP client versions
• HIP Object Patch Management

1. Refer to the following external articles to try and resolve the issue on Windows.

• https://thegeekpage.com/error-code-0x80240438/
• https://ugetfix.com/ask/how-to-fix-error-code-0x80240438-on-windows-10/
• https://www.howtoedge.com/fix-update-and-store-error-0x80240438-on-windows-10/

2. As a Workaround, create a new HIP object with patch management unchecked and add it to the existing HIP profile.