locked
Getting a Load of Event 4107, CAPI2 in the Application Log RRS feed

  • Question

  • I have a huge number of these in the Application log -- any guidence on what they mean would be helpful.
    This is a relatively clean Windows 7 x64 system with Office 2007 and Visual Studio 2008.

    The online help just says:
    Results for: Microsoft Product: Windows Operating System; Version: 6.1.7600.16385; Event ID: 4107; Event Source: Microsoft-Windows-CAPI2;

    No results were found for your query. Please see Search Help for suggestions.

    Details:

    Log Name:      Application
    Source:        Microsoft-Windows-CAPI2
    Date:          8/10/2009 10:14:39 PM
    Event ID:      4107
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      NYW7-0010
    Description:
    Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
    .
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
        <EventID Qualifiers="0">4107</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8080000000000000</Keywords>
        <TimeCreated SystemTime="2009-08-11T02:14:39.776932800Z" />
        <EventRecordID>1330</EventRecordID>
        <Correlation />
        <Execution ProcessID="1076" ThreadID="3156" />
        <Channel>Application</Channel>
        <Computer>NYW7-0010</Computer>
        <Security />
      </System>
      <EventData>
        <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
        <Data>The data is invalid.
    </Data>
      </EventData>
    </Event>
    Thursday, August 20, 2009 2:25 AM

Answers


  • Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>



    Try downloading it and manually installing it.

    At the beginning of this year, I had run into a similar problem with Vista.  I eventually determined it was rejecting a signed MS certificate, one whose certifying authority was again MS.  So, the error description wasn't quite consistent with the problem.  Double-clicking the .cab and manually installing that certificate didn't help anything; I could really find nothing wrong with it.  It just seemed that something else was going wrong when it was being referenced somehow.  Ultimately, I discovered that Windows Media Player Network Sharing Service was the source of the event, and since I don't use that, I just disabled the service.  Problem solved (for me).

    My story in the paragraph above probably doesn't pertain to your situation.  I include it only as an example to prepare you for the indirect reasoning you might need to apply after downloading that .cab file.  Good luck.

    Or maybe, just ignore it.

    • Proposed as answer by Cool_Mr_Dan Thursday, August 20, 2009 5:04 PM
    • Marked as answer by Arthur Xie Friday, August 28, 2009 8:31 AM
    Thursday, August 20, 2009 7:20 AM
  • I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues.
    • Marked as answer by saberman Wednesday, October 7, 2009 9:12 PM
    Wednesday, October 7, 2009 3:15 PM

All replies


  • Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>



    Try downloading it and manually installing it.

    At the beginning of this year, I had run into a similar problem with Vista.  I eventually determined it was rejecting a signed MS certificate, one whose certifying authority was again MS.  So, the error description wasn't quite consistent with the problem.  Double-clicking the .cab and manually installing that certificate didn't help anything; I could really find nothing wrong with it.  It just seemed that something else was going wrong when it was being referenced somehow.  Ultimately, I discovered that Windows Media Player Network Sharing Service was the source of the event, and since I don't use that, I just disabled the service.  Problem solved (for me).

    My story in the paragraph above probably doesn't pertain to your situation.  I include it only as an example to prepare you for the indirect reasoning you might need to apply after downloading that .cab file.  Good luck.

    Or maybe, just ignore it.

    • Proposed as answer by Cool_Mr_Dan Thursday, August 20, 2009 5:04 PM
    • Marked as answer by Arthur Xie Friday, August 28, 2009 8:31 AM
    Thursday, August 20, 2009 7:20 AM
  • Saberman, it seems as if it is failing trying to update a 3rd party security certificate. I agree with derosnec's suggestion. Let us disable the Windows Media Player Network Sharing Service to check the result.

    After doing some research, I found some information related this error message. Please refer to Automatic Root Certificates Update Configuration

    I hope the above information is useful for you. :)

    Friday, August 21, 2009 9:20 AM

  • I agree that's what it seems to be.


    I just now dug up a sample log that my computers (plural) recorded.  Here is one:

    Log Name:      Application
    Source:        Microsoft-Windows-CAPI2
    Date:          12/26/2008 12:22:53 AM
    Event ID:      11
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      derosnec-PC
    Description:
    Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.


    I also followed the instructions from the Event Viewer link:  Event Log Online Help

    Then I found the .cab in Temp (or wherever, it's been a long time since it happened).  There is nothing wrong with the folders' permissions.  I examined the .cab and could find no problems with it either.  Then I downloaded the .cab to the desktop and manually loaded it.  And then spent a lot of time tinkering and studying it.  That is how I found that MS was the certifying authority of that MS certificate.  So it seems that MS is the 3rd party that MS is certifying.

    I decided that online help page was useless.

    It makes me want to scream.



    Here.  I just went through the exercise again.  I downloaded it, extracted the certificate, and examined it via right-click Properties.  Too bad I cannot cut-and-paste its info here.  I'll transcribe.  On the Digital Signatures [Details] > General [View Certificate] page, it says:



    Certificate Information


    This certificate is not valid for the selected purpose.

    Issued to:  Microsoft Certificate Trust List Publisher

    Issued by:  Microsoft Certificate Trust List PCA

    Valid from  4/11/2009  to  7/11/2010




    See the problem?

    Friday, August 21, 2009 1:32 PM
  • Hi saberman,

    Does derosnec's suggestion fix this issue?

    :)
    Candice
    Friday, August 28, 2009 8:04 AM
  • getting this too in Win7/64 (7600) now...guess I'll just ignore it

    Log Name:      Application
    Source:        Microsoft-Windows-CAPI2
    Date:          10/5/2009 10:32:07 PM
    Event ID:      4107
    Task Category: None
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      
    Description:
    Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.
    .
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
        <EventID Qualifiers="0">4107</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>0</Task>
        <Opcode>0</Opcode>
        <Keywords>0x8080000000000000</Keywords>
        <TimeCreated SystemTime="2009-10-05T20:32:07.518867300Z" />
        <EventRecordID>4519</EventRecordID>
        <Correlation />
        <Execution ProcessID="960" ThreadID="5732" />
        <Channel>Application</Channel>
        <Computer>******</Computer>
        <Security />
      </System>
      <EventData>
        <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
        <Data>The data is invalid.
    </Data>
      </EventData>
    </Event>
    Monday, October 5, 2009 9:20 PM
  • I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues.
    • Marked as answer by saberman Wednesday, October 7, 2009 9:12 PM
    Wednesday, October 7, 2009 3:15 PM
  • I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues.

    I think I'll go with your approach.  It fits into my work schedule rather well.
    • Proposed as answer by Zuhl3156 Thursday, October 8, 2009 11:57 PM
    Wednesday, October 7, 2009 9:12 PM
  • Anything new on this topic ?

    I get about 20 errors like this per day on my system (windows 7 / 64bit) which is really annoying.

    regards

    DS
    Thursday, October 29, 2009 9:34 AM
  • I am no longer using the Windows 7 RC Ultimate 64 bit version. I am now using the "official" version of Windows 7 Home Premium. And after updating my printer and video drivers at Lexmark and Nvidia to the Windows 7 version I have had no more errors.
    • Edited by Zuhl3156 Friday, October 30, 2009 5:07 PM additional information
    Friday, October 30, 2009 5:05 PM
  • Anything new on this topic ?

    I get about 20 errors like this per day on my system (windows 7 / 64bit) which is really annoying.

    regards

    DS

    Since this thread has already been marked as 'answered', you may have better results if you post this again as a new question.
    Friday, October 30, 2009 5:12 PM
  • Hi saberman,

    Does derosnec's suggestion fix this issue?

    :)
    Candice

    Just one more bug to be ignored for the time being.  Of course it does make troubleshooting other problems more difficult as you have to filter out the bogus events.

    Since the security check on the certificate is failing and it appears not to have any impact on the system's operation does that mean that certificate checking is just a cosmetic?  That is, something that is done to make it appear it enhances security?
    Friday, October 30, 2009 6:51 PM
  • See my Side by Side error. It is almost identical. I deleted the .dll file and have to wait and see since the error only occurs at 12:33 am.
    Sunday, November 1, 2009 1:40 AM
  • Since 2 days suddenly no more errors - no idea why....
    Monday, November 2, 2009 9:20 AM
  • I deleted the whole folder labeled 'Search Helper' that the 'http://schemas...' line was in and I haven't had any errors since. Since there weren't any updates it can't be something MS did.
    • Proposed as answer by colas1 Wednesday, January 23, 2013 1:10 PM
    Monday, November 2, 2009 10:03 AM
    • Proposed as answer by SU_Anonymous Wednesday, June 6, 2012 4:29 PM
    Monday, August 2, 2010 11:12 AM
  • please follow this KB http://support.microsoft.com/kb/2328240

    release on 26 august 2010

     

    • Proposed as answer by ralfymann Friday, September 10, 2010 1:30 AM
    Thursday, September 2, 2010 9:23 AM
  • Didn't work for me on two different servers.  I'm trying to install a MSP file.

     

     

    Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.


    Bradley
    Friday, September 3, 2010 6:49 PM
  • That did it. Thanks! Also, the other advice given here:

    http://msmvps.com/blogs/bradley/archive/2010/09/02/capi2-errors-driving-you-crazy.aspx

     

    Friday, September 10, 2010 1:31 AM
  • http://support.microsoft.com/kb/2328240

    has info on this for those still in need

    Saturday, February 12, 2011 8:00 AM
  • I am having this problem too, but can't find any solutions.

    My Log:

    Log Name:      Application

    Source:        Microsoft-Windows-CAPI2

    Date:          20/05/2012 10:20:07 AM

    Event ID:      4107

    Task Category: None

    Level:         Error

    Keywords:      Classic

    User:          N/A

    Computer:      MyPC

    Description:

    Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.

    Please note the description is NOT: "A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file." but is " with error: The data is invalid."

    I have run additional logging on CAPI2 and found the offending program is "consent.exe". I can post these if they are relevant.

    I tried disabling the "Windows Media Player Network Sharing Service", which initially I thought had worked as I did not think I saw any errors upon the next reboot, however the above metioned error is still occuring, and I still have the "Windows Media Player Network Sharing Service" disabled.

    Hoping someone can assist me further with this.

    Sunday, May 20, 2012 1:00 AM