Link to home
Start Free TrialLog in
Avatar of Black-Mesa-NL

asked on

Re-open: Every minute: Event 36887 - fatal alert: 46

I discovered major loads of events in event log. All the same:

Log name: System
Source: Schannel
EventID: 36887
User: system
Computer: EX1126

The following fatal alert was received: 46

- System

  - Provider

   [ Name]  Schannel
   [ Guid]  {1F678132-5938-4686-9FDC-C8FF68F15C85}
   EventID 36887
   Version 0
   Level 2
   Task 0
   Opcode 0
   Keywords 0x8000000000000000
  - TimeCreated

   [ SystemTime]  2012-11-02T10:08:42.434657200Z
   EventRecordID 11954
  - Execution

   [ ProcessID]  476
   [ ThreadID]  6256
   Channel System
   Computer EX1126.ourdomain.lan
  - Security

   [ UserID]  S-1-5-18

- EventData

  AlertDesc 46

All certificates are present and in place. (COMODO and self signed Exchange) There are no implications for issues with security accounts of whatsoever.

I'm very sorry to open this question again (as a new question that is, but still..). But at first sight it seemed to be solved by Theruck but actually the same events returned after 48 minutes. Again every minute a new event.

So, anyone any other ideas not yet mentioned in ?

 User generated image
Thanks in advance
Avatar of Jean-Bernard VERNEJOUX
Jean-Bernard VERNEJOUX
Flag of France image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Black-Mesa-NL


This worked. Thanks!
Black-Mesa-NL, can you share what was done to fix this?

I have Exchange 2013 Std and noticed the same problem which started last month.

The link you provided recommends a security update, but does not have a patch for Server 2012.  Furthermore, it would be near impossible to touch each non-windows device that utilizes email.  Is there any way to narrow this down better?