none
CAPI2 Event ID : 11 Failed extract of third-party root list from auto update cab at: error

    Question

  • Noticed this morning that we are getting the below identical error message on 2 of our 2008R2 servers.

    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
      <EventID Qualifiers="49154">11</EventID>
      <Version>0</Version>
      <Level>2</Level>
      <Task>0</Task>
      <Opcode>0</Opcode>
      <Keywords>0x80000000000000</Keywords>
      <TimeCreated SystemTime="2012-12-06T10:00:01.000Z" />
      <EventRecordID>445995</EventRecordID>
      <Correlation />
      <Execution ProcessID="0" ThreadID="0" />
      <Channel>Application</Channel>
      <Computer>computername.domain</Computer>
      <Security />
      </System>
    - <EventData>
      <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
      <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.</Data>
      </EventData>

     </Event>

    It doesnt seem to have affected anything yet, how do we resolve this?

    Thursday, December 06, 2012 10:13 AM

All replies

  • Hello, 

    This error occurs because the Microsoft Certificate Trust List Publisher certificate expired. A copy of the CTL with an expired signing certificate exists in the CryptnetUrlCache folder.

    So, I suggest you check this Article and troubleshoot accordingly.


    Regards, Ravikumar P

    Thursday, December 06, 2012 10:29 AM
  • Did not help but thanks anyway
    Monday, December 10, 2012 4:24 PM