Link to home
Start Free TrialLog in
Avatar of tinus67
tinus67Flag for Netherlands

asked on

Windows 2008 server froze. Log files display schannel error.

Hello,

After a few weeks of having no problems with my server. All of a sudden today my server froze again. Only way to get it working again was to give the server a hard reboot.

When the server came back online i went trough my log files. and found the folowing error:
User generated image
This is the only reason i could see for the server to froze.

Hope you guys can give me a hand with this.

Server Stats:
OS: Windows 2008 R2 Standard
Software: Exchange 2010
Back-up Exec 2010

Kind regards,

Wesley van Roekel
Avatar of sunnyc7
sunnyc7
Flag of United States of America image

Can you copy paste the events please.

thanks
Avatar of tinus67

ASKER

You meen this?
 Error 1 36888:
Log Name:      System
Source:        Schannel
Date:          6/23/2010 8:18:03 AM
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      srv-exchange.pti.local
Description:
The following fatal alert was generated: 40. The internal error state is 1205.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
    <EventID>36888</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-06-23T06:18:03.372077800Z" />
    <EventRecordID>12136</EventRecordID>
    <Correlation />
    <Execution ProcessID="536" ThreadID="692" />
    <Channel>System</Channel>
    <Computer></Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="AlertDesc">40</Data>
    <Data Name="ErrorState">1205</Data>
  </EventData>
</Event>
 
Error 2 36874:
Log Name:      System
Source:        Schannel
Date:          6/23/2010 8:18:03 AM
Event ID:      36874
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      srv-exchange.pti.local
Description:
An TLS 1.0 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The SSL connection request has failed.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
    <EventID>36874</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2010-06-23T06:18:03.372077800Z" />
    <EventRecordID>12135</EventRecordID>
    <Correlation />
    <Execution ProcessID="536" ThreadID="692" />
    <Channel>System</Channel>
    <Computer></Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="Protocol">TLS 1.0</Data>
  </EventData>
</Event>
 
ASKER CERTIFIED SOLUTION
Avatar of sunnyc7
sunnyc7
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tinus67

ASKER

The server is a Supermicro SYS-6025B 8R+V/8R+B
I am not familiar with supermicro hardware.
Did you update the drivers ?

Are you running any AV - Symantec / Norton / Trend
Can you disable this temporarily and see if the event's stop.
SOLUTION
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tinus67

ASKER

It looks like we had a hardware failure. We have changed the memory and our server is running stable.
Avatar of tinus67

ASKER

I have split the points between dariusg and sunnyc7 for the support. Thanks a lot.