?
Solved

Crypt32 Error in Application Event Log

Posted on 2011-03-03
4
Medium Priority
?
1,074 Views
Last Modified: 2012-05-11
In the Application log of a Windows Server 2003 Standard Edition Service Pack 2 server we continually get the error:

Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: This operation returned because the timeout period expired.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

We have Symantec End Point Protection so I tried this fix: http://www.symantec.com/business/support/index?page=content&id=TECH106277&locale=en_US and it did not work, even after a reboot.

I also updated Internet Exporer 6 to Internet Explorer 7.

- I see you can uninstall Root Certificates Add/Remove Windows Components but I would like to keep the configuration the same. This seems like a workaround and not a fix.
0
Comment
Question by:AIRITServiceDesk
  • 2
  • 2
4 Comments
 
LVL 11

Expert Comment

by:Tasmant
ID: 35027007
- do you use proxy to access Internet?
- in most case this happen when your servers cannot connect to Microsoft to retrieve some updates (especially the crypt32 process).
0
 

Author Comment

by:AIRITServiceDesk
ID: 35028177
We have an Proxy (ISA) setup for our client workstations but not on the server in question. We have several domain controllers in the same subnet and only one of them is getting generating this error. It looks like it started occuring when Symantec End Point Protection was installed based on the timestamps in the Event Log.
0
 
LVL 11

Accepted Solution

by:
Tasmant earned 2000 total points
ID: 35028496
Personnaly i've often encounter this issue and the only way we found was to manually install root certificate update or as you suggested to remove the Root Certificates in Add/Remove programs.
Are your servers getting updates from WSUS? Because this could help to ensure your root certificates are up to date.
If you suspect Symantec (and i think you're right), then you could maybe review the settings of this
http://social.technet.microsoft.com/Forums/en-US/winserverwsus/thread/5375b668-54c3-484f-acbb-19814bd43652/

Else i've found many information about this on Symantec:
http://www.symantec.com/connect/forums/crypt32-errors-event-viewer-after-sep-110-installation
And some solution too with ISA

Maybe have you configured proxy autodiscovery with ISA (WPAD) and probably with DHCP, so all your clients discover this information. But if DHCP traffic between your DC and the server is unallowed by SEP, then unable to discover proxy and fails.
Review this, it's for wsus but it's interesting to understand what happens:
http://support.microsoft.com/kb/900935/en-us
0
 

Author Comment

by:AIRITServiceDesk
ID: 35147400
- We do not use a Proxy on our servers.
- As soon as Symantec End Point Protection is uninstalled, the errors is stops.
- As soon as Symantec End Point Protection is installed, the error starts occuring every 10 minutes.
- I spoke to Symantec Technicial Support and the only reccomendations they had were the ones I found in the following Knowedge Base articles:

        - Symantec KB article:
          http://www.symantec.com/business/support/indexpage=content&id=TECH106277)
        - Microsoft KB
          http://support.microsoft.com/kb/317541/EN-US
- We have uninstalled Root Certificates from Add/Remove windows Components
- You cannot apply Root Certificate Updates to Servers, via WSUS, because the Root Certificate Updates "only apply to Windows XP workstations" based on WSUS.
0

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Recently, I had the need to build a standalone system to run a point-of-sale system. I’m running this on a low-voltage Atom processor, so I wanted a light-weight operating system, but still needed Windows. I chose to use Microsoft Windows Server 200…
Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
Is your OST file inaccessible, Need to transfer OST file from one computer to another? Want to convert OST file to PST? If the answer to any of the above question is yes, then look no further. With the help of Stellar OST to PST Converter, you can e…
With just a little bit of  SQL and VBA, many doors open to cool things like synchronize a list box to display data relevant to other information on a form.  If you have never written code or looked at an SQL statement before, no problem! ...  give i…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question