Microsoft-Windows CAPI2 failed extract of third-party root list from auto update cab

Anonymous

Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -

Log Name: Application

Source: Microsoft-Windows-CAPI2

Date: 27/05/2009 8:42:16 PM

Event ID: 11

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Helga-PC

Description:

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Event Xml:

<Channel>Application</Channel>

<Computer>Helga-PC</Computer>

</System>

<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>

<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

</Data>

</EventData>

</Event>

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

I don't see any reason the solution above would not work in Vista. I see the same folder structure and registry entries on Vista.

If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries: http://support.microsoft.com/kb/136393

Be sure to use the export option before deleting entries in order to back them up.

0 comments

Answer accepted by question author

Anonymous

This does help.

Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/

None of the posts I had seen on this had mentioned the need for this path.

Thanks,

Michael

Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.

it could also be that direct X is looking for some updated drivers

what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe

have a nice day

ps for some further info

http://technet.microsoft.com/en-us/library/dd772269.aspx

Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!

0 comments

138 additional answers

Anonymous

2009-06-04T10:08:04+00:00

Hi Martin, I found out the following: Every day after 4 pm the Certificate Services Client starts, afterwards the Security Centre starts and then I get the error with the CAPI2 as above. I have now gone back to the Windows Security log. I found even 5038 audit failure, System Integrity (it happened at the same time as the CAPI2 message). I get error message: Device/HarddiskVolume1\Windows\System32\drivers\mchInjDrv.sys is the cause.

I looked around on the Internet and it could be a Rootkit and it could be Malware. What do I do now. I really don't even know, what it all means. However, I think that it is all linked. Confuseduser
Was this answer helpful?

0 comments No comments
Anonymous

2009-06-04T07:49:53+00:00

Hi Martin, I am wondering whetheryou noticed my above email that a

" Microsoft-created Certificate Trust List is out of date or faulty, yet Microsoft refuses to issue a current certificate and has yet to reply to dozens of online posts seeking answers, yet another known Vista issue Microsoft ignores. Can Microsoft please explain why? Moreover, will Microsoft please update its Trust List for its own Windows Update site? " (I found this on another Forum through Google). Will above fix this problem or not? I do not have any problem with Microsoft Updates and when I go to Windows Updates in the Control Panel everything seems to be uptodate. I only noticed that the above problem seems to occur, when Windows checks for Updates.

My problem clearly refers to a Certificate that is invalid. Confuseduser P.S. I have the Microsoft Updates in my trusted sites. P.S. I also found Microsoft TechNet Even ll and I followed some of it, however, I do not know how to handle a web browser that requires an Automatic Root Certificate. Confuseduser
Was this answer helpful?

0 comments No comments
Anonymous

2009-06-03T18:11:08+00:00

That's pretty scary.

How certain are you that that list of commands will fix the problem?

I'm worried that if I run that long list of commands, my system might end up in a non-standard state from which Microsoft will not be able to update it, or get it back (without a re-install, etc).

I think I've got a standard installation (standard Dell hardware, standard Vista), so I would think that if SP2 has a bug, Microsoft would address it by something other than a cut-and-paste -- what about all the people who don't know how to do cut-and-paste, etc? I'd prefer to wait until Microsoft has definitely found the problem and issued a tested fix -- something more formal than a cut-and-paste.

Will there be something formal? Maybe via Update?

If the problem is thought to be unique to me and the other poster, why is that? What is the problem?

If there is information I can provide from my system to help confirm the problem, that'd be great, I'd be happy to provide it.
Was this answer helpful?

0 comments No comments