This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 27/05/2009 8:42:16 PM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Helga-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="49154">11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-05-27T10:42:16.000Z" />
<EventRecordID>32381</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Helga-PC</Computer>
<Security />
</System>
<EventData>
<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
</EventData>
</Event>
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
I don't see any reason the solution above would not work in Vista. I see the same folder structure and registry entries on Vista.
If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries: http://support.microsoft.com/kb/136393
Be sure to use the export option before deleting entries in order to back them up.
This does help.
Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/
None of the posts I had seen on this had mentioned the need for this path.
Thanks,
Michael
hi
Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.
it could also be that direct X is looking for some updated drivers
what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe
have a nice day
ps for some further info
http://technet.microsoft.com/en-us/library/dd772269.aspx
Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!
Hey Alex
take a look at this forum thread:
It is the Daylight Saving Time update, Open Windows Update, rt click on
it, and Hide it. Same goes for Office SP1. They wont trouble you again.
You can manually download the update/fix from 'here'
For some Vista updates troubleshooting tips, click 'here'
(http://www.winvistaclub.com/t4.html).
Today was a good day, I didn't have to use my AK.
Martin, more info: As mentioned, when doing a 'clean boot' using msconfig.exe, I noticed afterwards that ZoneAlarm (from Zonelabs) had still installed itself at boot but all other non-Microsoft items had not.
Today I tried setting ZoneAlarm to NOT install at start-up, using its own configuration options. When I restarted the system (normal mode), the start-up was much faster and there was only about 1 second between the Welcome screen and the rendering of my desktop. Nice! However, the CAPI2 error was still in the event log.
I restarted again and it was again very fast.
I re-set ZoneAlarm to load at start-up and restarted and it behaved as reported previously -- a long display of the Welcome message, followed by a few seconds of empty blue screen, then the rendering of the desktop.
I conclude ZoneAlarm is a factor in the delay (once apparently indefinite) and 'blue screen'. Maybe it's waiting for internet connectivity during its startup.
I presume Microsoft coordinates problem-solving within its 'ecosystem' since many end-users probably judge PCs by the overall experience. (I'd dump ZoneAlarm but I like knowing what wants to go out, and, AFAIK, the Vista firewall doesn't provide that.)
Hi, there seem to be different problems in this thread. I have found that the error message occurs, when the Security Certificate Client starts. When I then look under Security in the Event viewer, I notice an audit failure and I have listed the file above. I still don't know what to do with it. I have no problems with the general startup. Confuseduser (more confused now)
