I had tried some kind of general troubleshooting, didn't know there was a specific one for updates. I ran the update troubleshooter, it says:
"One or more Windows Update components are configured incorrectly." Then it stops the Bits and Cryptsvc services, then restarts them, says it's fixed. But...