Solved

Event id 36887, fatal alert received: 46 on Exchange 2010

Posted on 2015-02-23
3
237 Views
Last Modified: 2016-06-23
Hi, I am getting Schannel error repeatedly on my Exchange SP1 2008R2 Server.  Everything is working properly (webmail/ecp/activesync), but I get repeated Schannel event 36887 errors within my event logs.

These started following the installation of a new server certificate. Looking for a fix I have not yet found anything helpful online.

Thanks
0
Comment
Question by:Luca Settimo
3 Comments
 
LVL 9

Accepted Solution

by:
Benjamin MOREAU earned 500 total points
ID: 40626685
This error is "TLS1_ALERT_CERTIFICATE_UNKNOWN (46)"

I think you have to search if all your certificates are OK.

If you couldn't found any solution and if it's not a problem; you can disable Schannel message :

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
"EventLogging"=dword:00000000
Value       Description
0x0000        Do not log
0x0001        Log error messages
0x0002        Log warnings
0x0004        Log informational and success events
0
 

Author Comment

by:Luca Settimo
ID: 40626872
Thanks for your reply,

I think you may be on the right path with regards to the certificates. I will take a look at the Trusted Root Certification and delete any old unused Certificates. Failing this adding the EventLogging Regedit will be the only way forward.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
EXCH2013 IMAP problems 3 21
Exchange 2013 POP3 2 25
Exchange 2010 offline Address Book (OAB) not updating 10 38
Exchange 2007 stray Mailbox 5 17
Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
how to add IIS SMTP to handle application/Scanner relays into office 365.

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now