none
Error 36888 Schannel RRS feed

  • Question

  • An error is occurring on the servers

    Windows 2008 R2 Enterprise with IIS 7.0 Site hosted with SSL/Certificate

     
    - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
      <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
      <EventID>36888</EventID>
      <Version>0</Version>
      <Level>2</Level>
      <Task>0</Task>
      <Opcode>0</Opcode>
      <Keywords>0x8000000000000000</Keywords>
      <TimeCreated SystemTime="2011-01-25T11:21:19.198625000Z" />
      <EventRecordID>42969</EventRecordID>
      <Correlation />
      <Execution ProcessID="484" ThreadID="532" />
      <Channel>System</Channel>
      <Computer>b1153120.rio.rj.gov.br</Computer>
      <Security UserID="S-1-5-18" />
      </System>
    - <EventData>
      <Data Name="AlertDesc">10</Data>
      <Data Name="ErrorState">1203</Data>
      </EventData>
      </Event>

    Wednesday, January 26, 2011 11:44 AM

Answers

  • Hi,

     

    The event ID 36888 is usually due to a user tries to access a web site using HTTP but specifies an SSL port in the URL. For example, http://hostname or https://hostname. If some user access the website with the URL http://hostname:443, then this event will be logged. You can check the Schannel tracing log to confirm such scenario.

     

    If no issue is found, you can simply disable this Schannel event logging by changing the following registry value to 0.

     

    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurityProviders\SCHANNEL\EventLogging

     

    For more information, please refer to the following link:

     

    http://support.microsoft.com/kb/260729  

     

    Thanks.

    Nina


    This posting is provided "AS IS" with no warranties, and confers no rights.
    Monday, January 31, 2011 3:36 AM
    Moderator

All replies