Security Update (KB2917500) fails to update on SCCM client

Question

In this latest batch of December updates, I've run across about 4 updates that stubbornly refuse to update from the Software Center. They all return an error 0x87D00705 which in a CMTrace lookup says the error is "Pause State Required". The actual
message in Software Center reads
The software change returned error code 0x87D00705(-2016409851).
The UpdatesDeployment.log shows the same error code. When I Retry the update, it logs this
InstallUpdates Initiated by user 
ApplyCIs - JobId = {4AD644BB-081B-4043-9674-A19FBA5C2EBB} 
Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 0, Result = 0x0
Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
verbosity 30l 
Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateDownloading, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
verbosity 30l 
Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
verbosity 30l 
CUpdatesJob({4AD644BB-081B-4043-9674-A19FBA5C2EBB}): CUpdatesJob::NotifyError - NotifyError received. Result = 0x87d00705 
Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda) Progress: Status = ciStateError, PercentComplete = 0, DownloadSize = 0, Result =
0x87d00705 
Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 1l, value NULL, user NULL, session 4294967295l, level 0l,
verbosity 30l 
Not refreshing update presence state as error CI Info status received
Raising client SDK event for class CCM_SoftwareUpdate, instance CCM_SoftwareUpdate.UpdateID="Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda", actionType 11l, value NULL, user NULL, session 4294967295l, level 0l,
verbosity 30l 
CUpdatesJob({4AD644BB-081B-4043-9674-A19FBA5C2EBB}): Delete job from WMI UpdatesDeploymentAgent 12/13/2013 10:12:30 AM 4960 (0x1360)
No other installations in pipeline. No reboot required. 
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
Has anyone run into this error before?
Orange County District Attorney

Answer 1

InstallUpdates Initiated by user 
ApplyCIs - JobId = {4AD644BB-081B-4043-9674-A19FBA5C2EBB} 
Update (Site_D27959F3-68D0-45FE-8B2D-EA95DFA187FC/SUM_416de864-839a-4a61-907f-d18cabcc6dda)
Progress: Status = ciStateDetecting, PercentComplete = 0, DownloadSize = 0, Result = 0x0
<...>
Progress: Status = ciStateDownloading, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
<...>
Progress: Status = ciStateWaitInstall, PercentComplete = 0, DownloadSize = 0, Result = 0x0 
<...>
Progress: Status = ciStateError, PercentComplete = 0, DownloadSize = 0, Result =
0x87d00705 
<...>
Not refreshing update presence state as error CI Info status received
<...>
CUpdatesJob({4AD644BB-081B-4043-9674-A19FBA5C2EBB}): Delete job from WMI UpdatesDeploymentAgent 12/13/2013 10:12:30 AM 4960 (0x1360)
No other installations in pipeline. No reboot required. 
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
EnumerateUpdates for action (UpdateActionInstall) - Total actionable updates = 7 
without diving into all the other logs to see what's happening in the time-frame, it looks like the "normal" sequence of detect->download->install->confirm, isn't getting traction.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)