How do you troubleshoot and resolve Schannel Errors, Event ID 36888? RRS feed

  • Question

  • I'm getting a slew of Schannel errors on clean install of Win 7 Pro x64. The errors seem to be related to IE and some websites. I've attempted some configuration changes in IE11, but they weren't effective. How do you troubleshoot and resolve Schannel errors as indicated below?

    Event 36888, Schannel


    The following fatal alert was generated: 43. The internal error state is 252.


    • - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      - <System>
        <Provider Name="Schannel"
      ="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
        <TimeCreated SystemTime="2015-12-19T12:19:01.587990700Z" />
        <Correlation />
        <Execution ProcessID="904" ThreadID="5680" />
        <Security UserID="S-1-5-18" />
      - <EventData>
        <Data Name="AlertDesc">43</Data>
        <Data Name="ErrorState">252</Data>

    • Edited by tjg79 Saturday, December 19, 2015 2:11 PM
    Saturday, December 19, 2015 1:55 PM

All replies

  • Hi tig,

    Thank you for your question.

    Schannel is one of the Security Support Providers. The Windows operating system implements the TLS/SSL protocols as a Security Support Provider SSP, a dynamic-link library (DLL) called Schannel that is supplied with the operating system.

    This issue could be caused by an error in certificate negotiation, please refer to the following links to fix it. If the issue persist, please be free to let me know.



    Best Regard,

    Jim Xu

    Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Jim Xu
    TechNet Community Support

    Monday, December 21, 2015 6:20 AM
  • Hi Jim,

    Thank you for the reply.

    I've looked at that first thread before. I tried the solution of unchecking all the TLS options in IE11, but that caused webpages not to display. From what I've read, it's my impression that the schannel errors are indicating IE is not using the correct protocol when it visits certain websites. I'd like to know if there is a way to confirm this by reviewing other logs or running some of the tools in system internals rather than just trying a bunch of "solutions" that may or may not work.

    This is a clean install and I've purposely avoided changes and some IE add-ons, because I want a clean install without log errors so I can take an image for restoring my system down the road. So, I'm perplexed as to why I'm getting them now. From the Google searches I read, this appears to have common since 2010 on clean installs.

    I was not getting schannel errors in my previous install and nothing has changed from the previous install other than there's a lot less on this machine at the moment. I've installed MS Office 2007, Adobe Acrobat 9, and some utilities.

    I have uninstalled six updates related to the "free" Win 10 upgrade, because I was getting some errors related to one of the installs. The error was eliminated once the Win 10 upgrade Updates were removed.



    • Edited by tjg79 Monday, December 21, 2015 11:33 AM
    Monday, December 21, 2015 11:29 AM
  • I'm still looking for a solution.
    Thursday, January 21, 2016 12:37 AM