Give this a try. In Internet Explorer, from main menu , select Tools ,Internet Options ,
Security Tab. Then click on green icon Trusted Sites/click Sites button.
Look very closely at line that says:
"Require server verification (https
for all sites in this zone" to *clear* the selection.
(e.g. You want that to be un-checked (un-ticked)).
In the "Add this Web site to the zone:" field, add these entries to list of "Trusted Sites" --
type
http://*.download.windowsupdate.com (click Add)
http://windowsupdate.microsoft.com
http://update.microsoft.com
Click OK. Apply changes to IE browser.
Then re-try Windows Update.
If no joy, go back into IE browser, recheck settings for Active X, so that signed controls are set to enabled.
I presume you did a right-click on message bar, to allow acceptance of Active control.
Do indicate if you are running some added security software utility that blocks or restricts ActiveX.