Solved

Crypt32 Error in Application Event Log

Posted on 2011-03-03
4
1,061 Views
Last Modified: 2012-05-11
In the Application log of a Windows Server 2003 Standard Edition Service Pack 2 server we continually get the error:

Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

We have Symantec End Point Protection so I tried this fix: http://www.symantec.com/business/support/index?page=content&id=TECH106277&locale=en_US and it did not work, even after a reboot.

I also updated Internet Exporer 6 to Internet Explorer 7.

- I see you can uninstall Root Certificates Add/Remove Windows Components but I would like to keep the configuration the same. This seems like a workaround and not a fix.
0
Comment
Question by:AIRITServiceDesk
  • 2
  • 2
4 Comments
 
LVL 11

Expert Comment

by:Tasmant
ID: 35027007
- do you use proxy to access Internet?
- in most case this happen when your servers cannot connect to Microsoft to retrieve some updates (especially the crypt32 process).
0
 

Author Comment

by:AIRITServiceDesk
ID: 35028177
We have an Proxy (ISA) setup for our client workstations but not on the server in question. We have several domain controllers in the same subnet and only one of them is getting generating this error. It looks like it started occuring when Symantec End Point Protection was installed based on the timestamps in the Event Log.
0
 
LVL 11

Accepted Solution

by:
Tasmant earned 500 total points
ID: 35028496
Personnaly i've often encounter this issue and the only way we found was to manually install root certificate update or as you suggested to remove the Root Certificates in Add/Remove programs.
Are your servers getting updates from WSUS? Because this could help to ensure your root certificates are up to date.
If you suspect Symantec (and i think you're right), then you could maybe review the settings of this
http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/5375b668-54c3-484f-acbb-19814bd43652/

Else i've found many information about this on Symantec:
http://www.symantec.com/connect/forums/crypt32-errors-event-viewer-after-sep-110-installation
And some solution too with ISA

Maybe have you configured proxy autodiscovery with ISA (WPAD) and probably with DHCP, so all your clients discover this information. But if DHCP traffic between your DC and the server is unallowed by SEP, then unable to discover proxy and fails.
Review this, it's for wsus but it's interesting to understand what happens:
http://support.microsoft.com/kb/900935/en-us
0
 

Author Comment

by:AIRITServiceDesk
ID: 35147400
- We do not use a Proxy on our servers.
- As soon as Symantec End Point Protection is uninstalled, the errors is stops.
- As soon as Symantec End Point Protection is installed, the error starts occuring every 10 minutes.
- I spoke to Symantec Technicial Support and the only reccomendations they had were the ones I found in the following Knowedge Base articles:

        - Symantec KB article:
          http://www.symantec.com/business/support/indexpage=content&id=TECH106277)
        - Microsoft KB
          http://support.microsoft.com/kb/317541/EN-US
- We have uninstalled Root Certificates from Add/Remove windows Components
- You cannot apply Root Certificate Updates to Servers, via WSUS, because the Root Certificate Updates "only apply to Windows XP workstations" based on WSUS.
0

Featured Post

Live: Real-Time Solutions, Start Here

Receive instant 1:1 support from technology experts, using our real-time conversation and whiteboard interface. Your first 5 minutes are always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Security Policy:  MS servers (2003, 2008, 2012, ++) file transfer question. 3 72
Dentrix G4 1 59
SolarWind and DNS Server 12 78
Best practices power settings GPO Win 10 4 96
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This Micro Tutorial will teach you how to censor certain areas of your screen. The example in this video will show a little boy's face being blurred. This will be demonstrated using Adobe Premiere Pro CS6.
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question