+ Post New Thread
Results 1 to 3 of 3
Windows Server 2008 Thread, CAPI2 errors - Event ID 11 on my server in Technical; Hi all, Getting these CAPI2 errors on one of my servers on site every odd minute, quite a random pattern. ...
  1. #1

    Join Date
    Jun 2012
    Location
    United Kingdom
    Posts
    14
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    CAPI2 errors - Event ID 11 on my server

    Hi all,

    Getting these CAPI2 errors on one of my servers on site every odd minute, quite a random pattern.

    - System

    - Provider

    [ Name] Microsoft-Windows-CAPI2
    [ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}
    [ EventSourceName] Microsoft-Windows-CAPI2

    - EventID 11

    [ Qualifiers] 49154

    Version 0

    Level 2

    Task 0

    Opcode 0

    Keywords 0x80000000000000

    - TimeCreated

    [ SystemTime] 2012-10-26T06:48:23.000Z

    EventRecordID 4298775

    Correlation

    - Execution

    [ ProcessID] 0
    [ ThreadID] 0

    Channel Application

    Computer SIMS11.coundoncourt.coventry.sch.uk

    Security


    - EventData

    http://www.download.windowsupdate.co...uthrootstl.cab
    A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.



    I have tried downloading the certificate myself using the link in the error and manually installing it but this still has not resolved my issue. I did turn on event logging for CAPI2 to try and narrow down the problem and this is the issue I am getting these two errors paired together:

    + System

    - Provider

    [ Name] Microsoft-Windows-CAPI2
    [ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}

    EventID 11

    Version 0

    Level 2

    Task 11

    Opcode 2

    Keywords 0x8000000000000003

    - TimeCreated

    [ SystemTime] 2012-10-26T07:18:24.923Z

    EventRecordID 83574

    - Correlation

    [ ActivityID] {00CC000C-F3A8-0079-B01F-782332E2D908}

    - Execution

    [ ProcessID] 8112
    [ ThreadID] 9080

    Channel Microsoft-Windows-CAPI2/Operational

    Computer SIMS11.coundoncourt.coventry.sch.uk

    - Security

    [ UserID] S-1-5-21-921872189-2381256353-2128242312-12800


    - UserData

    - CertGetCertificateChain

    - Certificate

    [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer
    [ subjectName] Microsoft Certificate Trust List Publisher

    - AdditionalStore

    - Certificate

    [ fileRef] 375FCB825C3DC3752A02E34EB70993B4997191EF.cer
    [ subjectName] Microsoft Time-Stamp PCA

    - Certificate

    [ fileRef] F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer
    [ subjectName] Microsoft Certificate Trust List PCA

    - Certificate

    [ fileRef] CDD4EEAE6000AC7F40C3802C171E30148030C072.cer
    [ subjectName] Microsoft Root Certificate Authority

    - Certificate

    [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer
    [ subjectName] Microsoft Certificate Trust List Publisher

    - Certificate

    [ fileRef] 7CB0244C7CEC5283E7EFDADF5CCC58772DD67F42.cer
    [ subjectName] Microsoft Time-Stamp Service


    - ExtendedKeyUsage

    - Usage

    [ oid] 1.3.6.1.4.1.311.10.3.9
    [ name] Root List Signer


    - Flags

    [ value] 100
    [ CERT_CHAIN_DISABLE_AUTH_ROOT_AUTO_UPDATE] true

    - ChainEngineInfo

    [ context] user

    - CertificateChain

    [ chainRef] {1B34C52C-74A3-46C6-91A4-856697EAF697}
    - TrustStatus

    - ErrorStatus

    [ value] 1
    [ CERT_TRUST_IS_NOT_TIME_VALID] true

    - InfoStatus

    [ value] 100
    [ CERT_TRUST_HAS_PREFERRED_ISSUER] true


    - ChainElement

    - Certificate

    [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer
    [ subjectName] Microsoft Certificate Trust List Publisher

    - TrustStatus

    - ErrorStatus

    [ value] 1
    [ CERT_TRUST_IS_NOT_TIME_VALID] true

    - InfoStatus

    [ value] 102
    [ CERT_TRUST_HAS_KEY_MATCH_ISSUER] true
    [ CERT_TRUST_HAS_PREFERRED_ISSUER] true


    - ApplicationUsage

    - Usage

    [ oid] 1.3.6.1.4.1.311.10.3.9
    [ name] Root List Signer


    IssuanceUsage


    - ChainElement

    - Certificate

    [ fileRef] F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer
    [ subjectName] Microsoft Certificate Trust List PCA

    - TrustStatus

    - ErrorStatus

    [ value] 0

    - InfoStatus

    [ value] 102
    [ CERT_TRUST_HAS_KEY_MATCH_ISSUER] true
    [ CERT_TRUST_HAS_PREFERRED_ISSUER] true


    - ApplicationUsage

    - Usage

    [ oid] 1.3.6.1.4.1.311.10.3.1
    [ name] Microsoft Trust List Signing

    - Usage

    [ oid] 1.3.6.1.4.1.311.10.3.9
    [ name] Root List Signer


    IssuanceUsage


    - ChainElement

    - Certificate

    [ fileRef] CDD4EEAE6000AC7F40C3802C171E30148030C072.cer
    [ subjectName] Microsoft Root Certificate Authority

    - TrustStatus

    - ErrorStatus

    [ value] 0

    - InfoStatus

    [ value] 10C
    [ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true
    [ CERT_TRUST_IS_SELF_SIGNED] true
    [ CERT_TRUST_HAS_PREFERRED_ISSUER] true


    - ApplicationUsage

    [ any] true

    - IssuanceUsage

    [ any] true



    - EventAuxInfo

    [ ProcessName] KKS.exe

    - CorrelationAuxInfo

    [ TaskId] {7BBBE31D-9136-4918-96A9-D3710F9B5A97}
    [ SeqNumber] 16

    - Result A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

    [ value] 800B0101


    And this one straight after:

    + System

    - Provider

    [ Name] Microsoft-Windows-CAPI2
    [ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}

    EventID 30

    Version 0

    Level 2

    Task 30

    Opcode 0

    Keywords 0x8000000000000001

    - TimeCreated

    [ SystemTime] 2012-10-26T07:18:24.923Z

    EventRecordID 83575

    - Correlation

    [ ActivityID] {00CC000C-F3A8-0079-B01F-782332E2D908}

    - Execution

    [ ProcessID] 8112
    [ ThreadID] 9080

    Channel Microsoft-Windows-CAPI2/Operational

    Computer SIMS11.coundoncourt.coventry.sch.uk

    - Security

    [ UserID] S-1-5-21-921872189-2381256353-2128242312-12800


    - UserData

    - CertVerifyCertificateChainPolicy

    - Policy

    [ type] CERT_CHAIN_POLICY_BASE
    [ constant] 1

    - Certificate

    [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer
    [ subjectName] Microsoft Certificate Trust List Publisher

    - CertificateChain

    [ chainRef] {1B34C52C-74A3-46C6-91A4-856697EAF697}

    - Flags

    [ value] 14
    [ CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG] true
    [ CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG] true

    - Status

    [ chainIndex] 0
    [ elementIndex] 0

    - EventAuxInfo

    [ ProcessName] KKS.exe

    - CorrelationAuxInfo

    [ TaskId] {7BBBE31D-9136-4918-96A9-D3710F9B5A97}
    [ SeqNumber] 17

    - Result A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

    [ value] 800B0101



    I realise that it is linked with the KKS.exe process but can't figure out how to fix it without disabling the service. This service needs to run on the server!

    Any help is much appreciated!

    Ross

  2. #2

    Join Date
    Oct 2012
    Location
    Romania
    Posts
    21
    Thank Post
    0
    Thanked 2 Times in 2 Posts
    Rep Power
    4
    The Microsoft Certificate Trust List Publisher certificate expired and there is a fix for this. Take a look at the bellow link.

    Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server

  3. Thanks to adrian_costea from:

    mcalpine89 (7th November 2012)

  4. #3

    Join Date
    Jun 2012
    Location
    United Kingdom
    Posts
    14
    Thank Post
    2
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Worked, THANKS!

SHARE:
+ Post New Thread

Similar Threads

  1. W7 Error Event ID 7000
    By Admiral208 in forum Windows 7
    Replies: 8
    Last Post: 13th November 2012, 08:08 AM
  2. Event ID 2012 Source Srv on Server 2008
    By cookie_monster in forum Windows Server 2008
    Replies: 64
    Last Post: 5th September 2011, 03:34 PM
  3. Event Error 1054 on Windows Server 2003 (64 bit)
    By Gibbo in forum Windows Server 2000/2003
    Replies: 6
    Last Post: 12th December 2008, 10:29 AM
  4. DCOM error Event ID 10005 on Citrix box
    By cookie_monster in forum Thin Client and Virtual Machines
    Replies: 0
    Last Post: 18th September 2008, 10:48 AM
  5. event ID 11708 - Sophos EM on New Server
    By monsterplastic in forum Windows
    Replies: 13
    Last Post: 9th March 2007, 05:28 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •