mcalpine89 Posted October 26, 2012 Posted October 26, 2012 Hi all, Getting these CAPI2 errors on one of my servers on site every odd minute, quite a random pattern. - System - Provider [ Name] Microsoft-Windows-CAPI2 [ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb} [ EventSourceName] Microsoft-Windows-CAPI2 - EventID 11 [ Qualifiers] 49154 Version 0 Level 2 Task 0 Opcode 0 Keywords 0x80000000000000 - TimeCreated [ SystemTime] 2012-10-26T06:48:23.000Z EventRecordID 4298775 Correlation - Execution [ ProcessID] 0 [ ThreadID] 0 Channel Application Computer SIMS11.coundoncourt.coventry.sch.uk Security - EventData http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. I have tried downloading the certificate myself using the link in the error and manually installing it but this still has not resolved my issue. I did turn on event logging for CAPI2 to try and narrow down the problem and this is the issue I am getting these two errors paired together: + System - Provider [ Name] Microsoft-Windows-CAPI2 [ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb} EventID 11 Version 0 Level 2 Task 11 Opcode 2 Keywords 0x8000000000000003 - TimeCreated [ SystemTime] 2012-10-26T07:18:24.923Z EventRecordID 83574 - Correlation [ ActivityID] {00CC000C-F3A8-0079-B01F-782332E2D908} - Execution [ ProcessID] 8112 [ ThreadID] 9080 Channel Microsoft-Windows-CAPI2/Operational Computer SIMS11.coundoncourt.coventry.sch.uk - Security [ UserID] S-1-5-21-921872189-2381256353-2128242312-12800 - UserData - CertGetCertificateChain - Certificate [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer [ subjectName] Microsoft Certificate Trust List Publisher - AdditionalStore - Certificate [ fileRef] 375FCB825C3DC3752A02E34EB70993B4997191EF.cer [ subjectName] Microsoft Time-Stamp PCA - Certificate [ fileRef] F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer [ subjectName] Microsoft Certificate Trust List PCA - Certificate [ fileRef] CDD4EEAE6000AC7F40C3802C171E30148030C072.cer [ subjectName] Microsoft Root Certificate Authority - Certificate [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer [ subjectName] Microsoft Certificate Trust List Publisher - Certificate [ fileRef] 7CB0244C7CEC5283E7EFDADF5CCC58772DD67F42.cer [ subjectName] Microsoft Time-Stamp Service - ExtendedKeyUsage - Usage [ oid] 1.3.6.1.4.1.311.10.3.9 [ name] Root List Signer - Flags [ value] 100 [ CERT_CHAIN_DISABLE_AUTH_ROOT_AUTO_UPDATE] true - ChainEngineInfo [ context] user - CertificateChain [ chainRef] {1B34C52C-74A3-46C6-91A4-856697EAF697} - TrustStatus - ErrorStatus [ value] 1 [ CERT_TRUST_IS_NOT_TIME_VALID] true - InfoStatus [ value] 100 [ CERT_TRUST_HAS_PREFERRED_ISSUER] true - ChainElement - Certificate [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer [ subjectName] Microsoft Certificate Trust List Publisher - TrustStatus - ErrorStatus [ value] 1 [ CERT_TRUST_IS_NOT_TIME_VALID] true - InfoStatus [ value] 102 [ CERT_TRUST_HAS_KEY_MATCH_ISSUER] true [ CERT_TRUST_HAS_PREFERRED_ISSUER] true - ApplicationUsage - Usage [ oid] 1.3.6.1.4.1.311.10.3.9 [ name] Root List Signer IssuanceUsage - ChainElement - Certificate [ fileRef] F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer [ subjectName] Microsoft Certificate Trust List PCA - TrustStatus - ErrorStatus [ value] 0 - InfoStatus [ value] 102 [ CERT_TRUST_HAS_KEY_MATCH_ISSUER] true [ CERT_TRUST_HAS_PREFERRED_ISSUER] true - ApplicationUsage - Usage [ oid] 1.3.6.1.4.1.311.10.3.1 [ name] Microsoft Trust List Signing - Usage [ oid] 1.3.6.1.4.1.311.10.3.9 [ name] Root List Signer IssuanceUsage - ChainElement - Certificate [ fileRef] CDD4EEAE6000AC7F40C3802C171E30148030C072.cer [ subjectName] Microsoft Root Certificate Authority - TrustStatus - ErrorStatus [ value] 0 - InfoStatus [ value] 10C [ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true [ CERT_TRUST_IS_SELF_SIGNED] true [ CERT_TRUST_HAS_PREFERRED_ISSUER] true - ApplicationUsage [ any] true - IssuanceUsage [ any] true - EventAuxInfo [ ProcessName] KKS.exe - CorrelationAuxInfo [ TaskId] {7BBBE31D-9136-4918-96A9-D3710F9B5A97} [ SeqNumber] 16 - Result A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. [ value] 800B0101 And this one straight after: + System - Provider [ Name] Microsoft-Windows-CAPI2 [ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb} EventID 30 Version 0 Level 2 Task 30 Opcode 0 Keywords 0x8000000000000001 - TimeCreated [ SystemTime] 2012-10-26T07:18:24.923Z EventRecordID 83575 - Correlation [ ActivityID] {00CC000C-F3A8-0079-B01F-782332E2D908} - Execution [ ProcessID] 8112 [ ThreadID] 9080 Channel Microsoft-Windows-CAPI2/Operational Computer SIMS11.coundoncourt.coventry.sch.uk - Security [ UserID] S-1-5-21-921872189-2381256353-2128242312-12800 - UserData - CertVerifyCertificateChainPolicy - Policy [ type] CERT_CHAIN_POLICY_BASE [ constant] 1 - Certificate [ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer [ subjectName] Microsoft Certificate Trust List Publisher - CertificateChain [ chainRef] {1B34C52C-74A3-46C6-91A4-856697EAF697} - Flags [ value] 14 [ CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG] true [ CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG] true - Status [ chainIndex] 0 [ elementIndex] 0 - EventAuxInfo [ ProcessName] KKS.exe - CorrelationAuxInfo [ TaskId] {7BBBE31D-9136-4918-96A9-D3710F9B5A97} [ SeqNumber] 17 - Result A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. [ value] 800B0101 I realise that it is linked with the KKS.exe process but can't figure out how to fix it without disabling the service. This service needs to run on the server! Any help is much appreciated! Ross
adrian_costea Posted November 7, 2012 Posted November 7, 2012 The Microsoft Certificate Trust List Publisher certificate expired and there is a fix for this. Take a look at the bellow link. Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now