For the sake of science...;)
If you have trouble with built-in update not working (especially with Windows 7), please make sure you have TLS1.1 (and/or) TLS1.2 checked under Internet Options>Advanced. It might not be enabled by default.
Other options to try (at your own risk):
install update kb3140245
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp" /v DefaultSecureProtocols /t reg_dword /d 0xA00 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\WinHttp" /v DefaultSecureProtocols /t reg_dword /d 0xA00 /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings" /v SecureProtocols /t reg_dword /d 0xA80 /f
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings" /v SecureProtocols /t reg_dword /d 0xA80 /f