Solved

CAPi2 errors on all Windows 2008 servers.

Posted on 2010-08-16
6
998 Views
Last Modified: 2012-05-10
I am getting the error below on all my Windows 2008 servers. I have read countless message board articles on this error and all kinds of remedies. Can somone please tell me whats going on here and how I resolve it without giving me a half dozen links to read because I believe I have seen them all. If you had this error, how did you get rid of it. It’s the strangest thing. On some servers, it stops for around 2 weeks, and then starts up again. On others, I get it every day several times a day.

Log Name:      Application
Source:        Microsoft-Windows-CAPI2
Date:          7/30/2010 10:14:56 PM
Event ID:      11
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      webserver.internal.local
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
    <EventID Qualifiers="49154">11</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2010-07-31T02:14:56.000Z" />
    <EventRecordID>267880</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>webserver.internal.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
    <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
  </EventData>
</Event>
0
Comment
Question by:osiexchange
  • 3
  • 2
6 Comments
 
LVL 6

Expert Comment

by:ajarvey
ID: 33446973
Check the time and date on all of the systems in question, and make sure they're not set to like, 1910 or something odd.
0
 

Author Comment

by:osiexchange
ID: 33446994
They are all fine. Most of them are my Exchange servers. I would know if the time were off.
0
 
LVL 6

Expert Comment

by:ajarvey
ID: 33447057
Are you using self signed certs?
0
Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

 

Author Comment

by:osiexchange
ID: 33447166
No. They are issued via Entrust.  This is occurring on servers that don't even have certificates installed so it has nothing to do with installed certificates. Its only 2008 servers.
0
 

Accepted Solution

by:
mesadmin earned 250 total points
ID: 33802970
0
 

Author Comment

by:osiexchange
ID: 33823837
Not yet. I got off track on this. I will check it out.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through configuring a drive on a Windows Server 2008 to perform shadow copies in order to quickly recover deleted files and folders. Click on Start and then select Computer to view the available drives on the se…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now