Fix iTunes Error 3004 and 9006 When Updating iPhone

iTunes errors 3004 and 9006 both block your iPhone from updating or restoring because iTunes can’t connect to Apple’s servers during the firmware handshake. The two codes have different root causes: error 3004 is almost always a firewall or VPN problem, while error 9006 is a download stability issue. Six fixes cover both, and most people clear the error with the first two.

#What Causes iTunes Error 3004 and 9006?

Both errors come down to one root cause: iTunes can’t complete a clean handshake with Apple’s servers. The specific failure point differs between the two codes.

Error 3004 fires when iTunes fails to reach gs.apple.com on ports 80 or 443. According to Apple, error 3004 appears in the documented iOS update and restore error list alongside codes 3000, 3002, 3014, 3194, and 3200, which all point to a local network or security software issue rather than an iPhone fault. Apple groups every code in that 3xxx range under the same connection-level root cause.

Error 9006 is different. It fires when the firmware download is interrupted mid-transfer. Apple’s official error list does not include 9006, so iTunes treats it as a generic download failure.

Error 3004 commonly appears whenever a VPN is running, and turning off the VPN usually clears it within seconds. Error 9006 is tied to network stability instead. The same machine can pull an update cleanly on Ethernet but throw 9006 repeatedly on a congested 2.4 GHz Wi-Fi channel, which points straight to packet loss.

Common triggers include:

• Firewalls or antivirus software blocking iTunes outbound traffic
• A VPN routing traffic through servers Apple rejects
• Hosts file entries that redirect gs.apple.com to a blocklist
• Outdated iTunes builds with expired server certificates
• Apple server congestion during a new iOS launch

#Quick Fixes for Error 3004

Start with the fastest methods first. Most people never need anything beyond these three.

#Disable Your Firewall and Antivirus

Temporarily turn off Windows Defender Firewall or your third-party antivirus for a few minutes. On Windows 11, go to Settings > Privacy & Security > Windows Security > Firewall & network protection, then toggle off the firewall for your active network profile.

On Mac, go to System Settings > Network > Firewall and switch it off. Try the iPhone update again. If it works, add iTunes to the firewall’s allowed apps so you don’t need to disable the full firewall every time.

Major antivirus products like Norton 360, Bitdefender Total Security, and Kaspersky Standard can all block iTunes during an update, often without showing an obvious alert. Norton and Bitdefender tend to catch iTunes in their “suspicious outbound connection” filters the first time it reaches Apple, and Kaspersky may require you to manually approve iTunes in its application control exceptions. Adding iTunes to the allow list once usually prevents the block from returning.

#Update iTunes to the Latest Version

Run the newest build of iTunes before trying anything else. Open iTunes and click Help > Check for Updates on Windows. On Mac, check the App Store for iTunes updates or use Finder on macOS Catalina and later.

According to Apple’s iTunes syncing support page, iTunes is still the path for Windows users and macOS Mojave or earlier, and the guide confirms that iTunes is used to sync iPhone, iPad, and iPod with your computer. Older iTunes builds carry expired server certificates that trigger error 3004 on a recurring basis, and updating to the latest version often clears it without any other change.

#Reset Your Hosts File

Your hosts file might contain entries that redirect Apple’s servers to a null address. This happens if you’ve ever installed an ad blocker, a privacy tool, or certain “speed booster” utilities that rewrite DNS resolution locally.

On Mac, open Terminal and run:

sudo nano /etc/hosts

On Windows, open Notepad as administrator and open C:\Windows\System32\drivers\etc\hosts.

Look for any line containing gs.apple.com, albert.apple.com, or mesu.apple.com. Delete those lines, save the file, and restart iTunes. If you’ve run into other iTunes errors before, a modified hosts file is one of the hidden causes that survives reinstalls.

#Network Fixes for Error 9006

Error 9006 is about the download failing, not about reaching the server. These methods target network stability and alternative download paths.

#Flush Your DNS Cache

Stale DNS entries can point iTunes to the wrong IP address, especially after Apple rotates a CDN endpoint. On Mac, open Terminal and run:

sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder

On Windows, open Command Prompt as administrator and run:

ipconfig /flushdns

The command finishes in under 2 seconds and returns “Successfully flushed the DNS Resolver Cache.” Try your update immediately after. Flushing DNS often clears an intermittent 9006 loop that keeps repeating, because it forces iTunes to resolve a fresh CDN endpoint.

#Switch to a Different Network

Try a wired Ethernet connection if you’re on Wi-Fi, or swap to a mobile hotspot if Ethernet isn’t available.

Switching from a saturated home Wi-Fi network to a mobile hotspot often resolves error 9006 outright, because the hotspot bypasses whatever was interrupting the download. A full iOS update can run several gigabytes, so a stable connection matters. Your router’s DNS or MTU settings may be the hidden cause without you realizing it, especially if your ISP throttles large sustained downloads.

If a different network isn’t available, change your DNS server to Google (8.8.8.8) or Cloudflare (1.1.1.1). Both have low latency to Apple’s CDN endpoints in most regions.

#Manual IPSW Download Method

When nothing else works, download the firmware yourself and skip iTunes’s download step entirely.

Go to the community firmware archive at ipsw.me, pick your iPhone model, and grab the latest signed IPSW file. File sizes run roughly 5 to 7 GB depending on the model. The site confirms that clicking a download link redirects you to Apple’s servers and states that the site does not mirror the files, so the bytes you receive are identical to what iTunes would fetch.

Once the file finishes downloading, connect your iPhone, open iTunes, hold Option (Mac) or Shift (Windows), click “Restore iPhone,” and select your downloaded IPSW file. Error 9006 can’t occur with this method because iTunes never downloads anything from Apple’s servers during the restore. The install takes about 10 to 15 minutes on a modern machine.

If you’re curious about what restoring actually does to your iPhone, it wipes the device completely and writes fresh firmware from the local file, which is why this path is more reliable than the standard online update flow.

#Third-Party Repair Tools for Persistent Errors

If you’ve tried everything above and still see errors, the problem likely runs deeper than your network. Corrupted iTunes components or broken iOS firmware can produce errors that survive two or three full reinstalls.

Tools like Dr.Fone iTunes Repair rebuild iTunes’s internal components, reset its certificate store, and fix underlying file corruption without needing you to manually reinstall anything. They can clear a stubborn error 3004 that survives multiple complete iTunes reinstalls, often by resolving a Bonjour service conflict that the standard iTunes installer keeps re-creating.

Some links on this page are affiliate links, which means fone.tips may earn a commission at no extra cost to you.

Tenorshare ReiBoot works from the iPhone side instead. It forces your device out of a stuck update state, which is useful when the error leaves your iPhone frozen on the Apple logo or the progress bar. This kind of tool can recover an iPhone left stuck on the loading screen after an error 9006 interrupts an iOS update.

#How Do You Know if Apple’s Servers Are Down?

Check Apple’s System Status page before assuming the problem is on your end. The page shows a live green indicator for every Apple service that is running normally, and flips to yellow or red for degraded or broken services. During the iOS 18 launch weekend, the Software Update entry on that page stayed yellow for most of the first day as Apple’s servers worked through the initial surge.

If everything on the status page looks green and the errors keep appearing, contact Apple Support directly with your iPhone model, iOS version number, and the exact error code. Having those three data points ready shortens the troubleshooting call by a lot.

Back up your data before making that call. If Apple escalates you to a DFU restore, the process wipes everything on the device, and there is no undo once it starts. You can transfer photos to your PC as a partial backup in about 30 minutes for a full photo library, or run an iCloud backup if you have the storage available.

If you’re dealing with a different iTunes code, check whether it’s error 4013 or error 9. Both have different root causes and different fixes from 3004 and 9006.

#Bottom Line

For errors 3004 and 9006 specifically, start by disabling your firewall and updating iTunes to the latest version. Those two steps resolve both errors quickly in most cases, on both Windows and macOS. If they don’t work, flush DNS, reset your hosts file entries for gs.apple.com, or download the IPSW manually from ipsw.me for your exact iPhone model.

Save Dr.Fone iTunes Repair for the edge case where iTunes itself is corrupted on Windows, not just blocked by your network. Skip any “universal fix” utility that doesn’t specifically target the handshake path between iTunes and gs.apple.com, because that’s where both error codes actually fire.

#Frequently Asked Questions