I was talking with one of my colleagues who is seeing the following message appear in the Application log (crypt32 error number 11) on all the machines in his customer's environment. He is running a multi-tier hierarchy, SCCM SP2 w/ R2 in MIXED mode, on Server 2008 R2 Enterprise. The errors started appearing last week. He's getting reports of widespread operational issues that seem to relate to the patch deployment process.
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: An internal certificate chaining error has occurred.
He has a Premier Support call open with Microsoft, but I told him I'd post this so it gets out to a wider audience.
This is totally not related to ConfigMgr at all.
However, have you seen the following kb: http://support.microsoft.com/default.aspx?scid=kb;en-us;2328240&sd=rss&spid=14498.
Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys
Thanks Jason, I'll let my colleague know about that article.
Seeing that SCCM controls WSUS, and these errors seem to indicate a link to patch deployment, I thought the issue could be related to WSUS (& SCCM). The operational issues end-users are seeing seem to coincide with patch deployment.