Can't log into iTunes account (error 0x80090326)

See About App Store and iTunes Store availability - Apple Support. Windows XP has outdated encryption support and can no longer connect to the iTunes Store.

tt2

You need Transport Security Layer (TLS) 1.2 on XP, which is possible if you tweak the registry and install the TLS 1.2 update from MS.

I got these instructions from SocketTools support.

It worked for me (11 Nov. 2018) with XP SP3, and I CAN AGAIN download all my apps in XP SP3, with iTunes 12.1.3.6

Support for TLS 1.2 on Windows XP

SocketTools uses the Windows CryptoAPI and Schannel security provider to provide support for Transport Security Layer (TLS), which is used with secure connections. The latest version of TLS that is supported on the Windows XP platform is TLS 1.0. However, an update that was released for Windows Embedded POSReady 2009 can be used to provide support for TLS 1.2.

More Information

Microsoft has released an update for Windows Embedded POSReady 2009 that provides support for TLS 1.2. This platform is a specialized version of Windows XP designed for point-of-service systems. If you are already developing for this platform, you can download update KB4019276 from Microsoft's Update Catalog.

If you are using Windows XP and your application requires support for TLS 1.2, it is possible to apply this update. You must be running Windows XP SP3 and you must make a change to the registry. It is strongly recommended that you upgrade to Windows 10 to ensure that you have the latest security updates and the strongest cipher suites available. However, if that is not a possibility, then you can follow these steps to install the update.

If you decide to make these changes, you acknowledge that you are doing this entirely at your own risk. Make sure that you have a full backup of the system.

1. Verify that you are running Windows XP SP3 with all of the available updates installed. If you have automatic updates enabled, it is recommended that you disable them at this time. After this change, Windows Update will now see your Windows XP system as Windows Embedded POSReady 2009 and there may be updates that are released for that platform that do no apply to your system. You will need to manually check and verify all updates after this change has been made.
2. Open the Registry Editor and create HKEY_LOCAL_MACHINE\SYSTEM\WPA\POSReady then select that key and define a DWORD value named Installed as 1. Once you have made this registry change, you will not be able to delete this key from the registry, even as an Administrator. This is effectively a permanent change to the system. To make this change easier, create a registry script by copying the following to a text file, name it "PosReady.reg" and then execute it by double-clicking on the file in Windows Explorer:
   

   Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\WPA\POSReady] "Installed"=dword:00000001

3. Download the KB4019276 update for Windows XP Embedded from the Microsoft Update Catalog. [Direct Link (English)] and install the update. You can verify that the update has installed correctly by using Windows Explorer to display the properties of the Schannel.dll and Rsaenh.dll files in \Windows\System32. Both files should be version 5.1.2600.7346 or later.
4. Reboot the system. Remember to manually check all subsequent updates made available through Windows Update and you should not automatically install updates for the POSReady 2009 platform. Microsoft has stated that these updates are not tested on Windows XP.

After this update has been installed, the system will support TLS 1.1 and TLS 1.2, as well as AES256-SHA256 and a few additional cipher suites. Note that this Microsoft update does not include support for stronger cipher suites that use elliptical curve cryptography (ECC).

If a secure connection cannot be established with the server, attempt the connection using the same application running on a Windows 7 system (or later version of Windows). If the connection succeeds on the Windows 7 system, but fails on the Windows XP system with this update installed, it is likely that the server has been configured to require both TLS 1.2 and cipher suites which are not available on the Windows XP platform.

Internet Explorer 8 does not provide support for TLS 1.2 even after this update has been installed. If you need TLS 1.2 support in a browser, you will need to download an alternate browser such as Chrome or Firefox.

SocketTools 9.3 and later versions will check if this update has been installed, and if available, will support the use of TLS 1.2 on these platforms. Earlier versions of SocketTools only support TLS 1.2 on Windows 7 and later platforms and are not affected by installing the KB4019276 update. To enable support for TLS 1.2 on Windows XP, Windows POSReady 2009 or Windows Server 2008 you must have the Microsoft update installed and you must upgrade to the current version of SocketTools.

External Links

Microsoft Update KB4019276
Microsoft Update Catalog

It was changed some time ago, but if iTunes "remembered" you were signed into the store it might not have flagged an error. The changeover itself happened a few months ago but was signalled a few years before that. It is all in response to PCI-DSS removing support for legacy systems running TLS1.0 which is no longer allowed to be used to transmit credit card details. Any build of iTunes released before December 2017 is incapable of reaching the iTunes Store for secure communications.

tt2

I just found the same issue. Last bought a song from iTunes in July when it worked fine, went to buy a song tonight, said it couldn't connect to the iTunes store and I got the same error code. So in reading all of this, it looks like if you have Windows XP, you're screwed when it comes to logging into iTunes. Wonderful.

Try Recover your iTunes library from your iPod or iOS device. MediaMonkey might be useful in this instance.

tt2

You're welcome. 🙂

Sorry it isn't better news.

tt2

Nice, although not perhaps for novices. 🙂

tt2

No you're not totally screwed. I'm still using XP to connect to the App store with iTunes 12.1.3.6 (the last version for XP).

Just follow steps 1 to 4 in my post above and iTunes will connect again.

No you're not totally screwed. I'm still using XP to connect to the App store with iTunes 12.1.3.6 (the last version for XP).

Just follow steps 1 to 4 in my post above and iTunes will connect again.