CAPI2 errors - Event ID 11 on my server

[mcalpine89]

Hi all,

 

Getting these CAPI2 errors on one of my servers on site every odd minute, quite a random pattern.

 

- System

 

- Provider

 

[ Name] Microsoft-Windows-CAPI2

[ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}

[ EventSourceName] Microsoft-Windows-CAPI2

 

- EventID 11

 

[ Qualifiers] 49154

 

Version 0

 

Level 2

 

Task 0

 

Opcode 0

 

Keywords 0x80000000000000

 

- TimeCreated

 

[ SystemTime] 2012-10-26T06:48:23.000Z

 

EventRecordID 4298775

 

Correlation

 

- Execution

 

[ ProcessID] 0

[ ThreadID] 0

 

Channel Application

 

Computer SIMS11.coundoncourt.coventry.sch.uk

 

Security

 

 

- EventData

 

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab

A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

 

I have tried downloading the certificate myself using the link in the error and manually installing it but this still has not resolved my issue. I did turn on event logging for CAPI2 to try and narrow down the problem and this is the issue I am getting these two errors paired together:

 

+ System

 

- Provider

 

[ Name] Microsoft-Windows-CAPI2

[ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}

 

EventID 11

 

Version 0

 

Level 2

 

Task 11

 

Opcode 2

 

Keywords 0x8000000000000003

 

- TimeCreated

 

[ SystemTime] 2012-10-26T07:18:24.923Z

 

EventRecordID 83574

 

- Correlation

 

[ ActivityID] {00CC000C-F3A8-0079-B01F-782332E2D908}

 

- Execution

 

[ ProcessID] 8112

[ ThreadID] 9080

 

Channel Microsoft-Windows-CAPI2/Operational

 

Computer SIMS11.coundoncourt.coventry.sch.uk

 

- Security

 

[ UserID] S-1-5-21-921872189-2381256353-2128242312-12800

 

 

- UserData

 

- CertGetCertificateChain

 

- Certificate

 

[ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer

[ subjectName] Microsoft Certificate Trust List Publisher

 

- AdditionalStore

 

- Certificate

 

[ fileRef] 375FCB825C3DC3752A02E34EB70993B4997191EF.cer

[ subjectName] Microsoft Time-Stamp PCA

 

- Certificate

 

[ fileRef] F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer

[ subjectName] Microsoft Certificate Trust List PCA

 

- Certificate

 

[ fileRef] CDD4EEAE6000AC7F40C3802C171E30148030C072.cer

[ subjectName] Microsoft Root Certificate Authority

 

- Certificate

 

[ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer

[ subjectName] Microsoft Certificate Trust List Publisher

 

- Certificate

 

[ fileRef] 7CB0244C7CEC5283E7EFDADF5CCC58772DD67F42.cer

[ subjectName] Microsoft Time-Stamp Service

 

 

- ExtendedKeyUsage

 

- Usage

 

[ oid] 1.3.6.1.4.1.311.10.3.9

[ name] Root List Signer

 

 

- Flags

 

[ value] 100

[ CERT_CHAIN_DISABLE_AUTH_ROOT_AUTO_UPDATE] true

 

- ChainEngineInfo

 

[ context] user

 

- CertificateChain

 

[ chainRef] {1B34C52C-74A3-46C6-91A4-856697EAF697}

- TrustStatus

 

- ErrorStatus

 

[ value] 1

[ CERT_TRUST_IS_NOT_TIME_VALID] true

 

- InfoStatus

 

[ value] 100

[ CERT_TRUST_HAS_PREFERRED_ISSUER] true

 

 

- ChainElement

 

- Certificate

 

[ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer

[ subjectName] Microsoft Certificate Trust List Publisher

 

- TrustStatus

 

- ErrorStatus

 

[ value] 1

[ CERT_TRUST_IS_NOT_TIME_VALID] true

 

- InfoStatus

 

[ value] 102

[ CERT_TRUST_HAS_KEY_MATCH_ISSUER] true

[ CERT_TRUST_HAS_PREFERRED_ISSUER] true

 

 

- ApplicationUsage

 

- Usage

 

[ oid] 1.3.6.1.4.1.311.10.3.9

[ name] Root List Signer

 

 

IssuanceUsage

 

 

- ChainElement

 

- Certificate

 

[ fileRef] F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer

[ subjectName] Microsoft Certificate Trust List PCA

 

- TrustStatus

 

- ErrorStatus

 

[ value] 0

 

- InfoStatus

 

[ value] 102

[ CERT_TRUST_HAS_KEY_MATCH_ISSUER] true

[ CERT_TRUST_HAS_PREFERRED_ISSUER] true

 

 

- ApplicationUsage

 

- Usage

 

[ oid] 1.3.6.1.4.1.311.10.3.1

[ name] Microsoft Trust List Signing

 

- Usage

 

[ oid] 1.3.6.1.4.1.311.10.3.9

[ name] Root List Signer

 

 

IssuanceUsage

 

 

- ChainElement

 

- Certificate

 

[ fileRef] CDD4EEAE6000AC7F40C3802C171E30148030C072.cer

[ subjectName] Microsoft Root Certificate Authority

 

- TrustStatus

 

- ErrorStatus

 

[ value] 0

 

- InfoStatus

 

[ value] 10C

[ CERT_TRUST_HAS_NAME_MATCH_ISSUER] true

[ CERT_TRUST_IS_SELF_SIGNED] true

[ CERT_TRUST_HAS_PREFERRED_ISSUER] true

 

 

- ApplicationUsage

 

[ any] true

 

- IssuanceUsage

 

[ any] true

 

 

 

- EventAuxInfo

 

[ ProcessName] KKS.exe

 

- CorrelationAuxInfo

 

[ TaskId] {7BBBE31D-9136-4918-96A9-D3710F9B5A97}

[ SeqNumber] 16

 

- Result A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

[ value] 800B0101

 

And this one straight after:

 

+ System

 

- Provider

 

[ Name] Microsoft-Windows-CAPI2

[ Guid] {5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}

 

EventID 30

 

Version 0

 

Level 2

 

Task 30

 

Opcode 0

 

Keywords 0x8000000000000001

 

- TimeCreated

 

[ SystemTime] 2012-10-26T07:18:24.923Z

 

EventRecordID 83575

 

- Correlation

 

[ ActivityID] {00CC000C-F3A8-0079-B01F-782332E2D908}

 

- Execution

 

[ ProcessID] 8112

[ ThreadID] 9080

 

Channel Microsoft-Windows-CAPI2/Operational

 

Computer SIMS11.coundoncourt.coventry.sch.uk

 

- Security

 

[ UserID] S-1-5-21-921872189-2381256353-2128242312-12800

 

 

- UserData

 

- CertVerifyCertificateChainPolicy

 

- Policy

 

[ type] CERT_CHAIN_POLICY_BASE

[ constant] 1

 

- Certificate

 

[ fileRef] 51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer

[ subjectName] Microsoft Certificate Trust List Publisher

 

- CertificateChain

 

[ chainRef] {1B34C52C-74A3-46C6-91A4-856697EAF697}

 

- Flags

 

[ value] 14

[ CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG] true

[ CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG] true

 

- Status

 

[ chainIndex] 0

[ elementIndex] 0

 

- EventAuxInfo

 

[ ProcessName] KKS.exe

 

- CorrelationAuxInfo

 

[ TaskId] {7BBBE31D-9136-4918-96A9-D3710F9B5A97}

[ SeqNumber] 17

 

- Result A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

 

[ value] 800B0101

 

 

I realise that it is linked with the KKS.exe process but can't figure out how to fix it without disabling the service. This service needs to run on the server!

 

Any help is much appreciated!

 

Ross

[adrian_costea]

The Microsoft Certificate Trust List Publisher certificate expired and there is a fix for this. Take a look at the bellow link.

 

Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server

[mcalpine89]

Worked, THANKS!