Solved

CAPi2 errors on all Windows 2008 servers.

Posted on 2010-08-16
6
1,004 Views
Last Modified: 2012-05-10
I am getting the error below on all my Windows 2008 servers. I have read countless message board articles on this error and all kinds of remedies. Can somone please tell me whats going on here and how I resolve it without giving me a half dozen links to read because I believe I have seen them all. If you had this error, how did you get rid of it. It’s the strangest thing. On some servers, it stops for around 2 weeks, and then starts up again. On others, I get it every day several times a day.

Log Name:      Application
Source:        Microsoft-Windows-CAPI2
Date:          7/30/2010 10:14:56 PM
Event ID:      11
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      webserver.internal.local
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
    <EventID Qualifiers="49154">11</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-07-31T02:14:56.000Z" />
    <EventRecordID>267880</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>webserver.internal.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
    <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
  </EventData>
</Event>
0
Comment
Question by:osiexchange
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 6

Expert Comment

by:ajarvey
ID: 33446973
Check the time and date on all of the systems in question, and make sure they're not set to like, 1910 or something odd.
0
 

Author Comment

by:osiexchange
ID: 33446994
They are all fine. Most of them are my Exchange servers. I would know if the time were off.
0
 
LVL 6

Expert Comment

by:ajarvey
ID: 33447057
Are you using self signed certs?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:osiexchange
ID: 33447166
No. They are issued via Entrust.  This is occurring on servers that don't even have certificates installed so it has nothing to do with installed certificates. Its only 2008 servers.
0
 

Accepted Solution

by:
mesadmin earned 250 total points
ID: 33802970
0
 

Author Comment

by:osiexchange
ID: 33823837
Not yet. I got off track on this. I will check it out.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question