Microsoft-Windows CAPI2 failed extract of third-party root list from auto update cab

Anonymous

Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -

Log Name: Application

Source: Microsoft-Windows-CAPI2

Date: 27/05/2009 8:42:16 PM

Event ID: 11

Task Category: None

Level: Error

Keywords: Classic

User: N/A

Computer: Helga-PC

Description:

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Event Xml:

<Channel>Application</Channel>

<Computer>Helga-PC</Computer>

</System>

<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>

<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

</Data>

</EventData>

</Event>

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

Answer accepted by question author

Anonymous

I don't see any reason the solution above would not work in Vista. I see the same folder structure and registry entries on Vista.

If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries: http://support.microsoft.com/kb/136393

Be sure to use the export option before deleting entries in order to back them up.

0 comments

Answer accepted by question author

Anonymous

This does help.

Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/

None of the posts I had seen on this had mentioned the need for this path.

Thanks,

Michael

Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.

it could also be that direct X is looking for some updated drivers

what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe

have a nice day

ps for some further info

http://technet.microsoft.com/en-us/library/dd772269.aspx

Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!

0 comments

138 additional answers

Anonymous

2009-06-05T12:20:55+00:00

Hi Pibes,

I took a look at the other forum thread that you have kindly provided. Although I do not have the Daylight Saving Time update on my list, I will try hiding all the the other optional updates that I do have and see if this action will produce results on this CAPI2 11 problem.

Thanks,

Alex_PH
Was this answer helpful?

0 comments No comments
Anonymous

2009-06-05T18:24:16+00:00

Hello All,

To confuseduser: If I'm not mistaken, your Windows Update has been set to automatic and scheduled to run at 4pm. My setting on the other hand is just to "check for updates and let me choose ...".  With my setting, an automatic check for updates is performed every time I start or re-start my pc.

To Pibes: I've hidden all the optional updates on my list and re-started my pc with the on-board LAN enabled. Result: CAPI2 11 error still occured.

To Martin: I do not know if this is significant, but here are the results of something new that I've tried:

a.  With a CAPI2 11 error already registered in the event logs for the current pc work session, I perform a

    manual check for Windows updates.  Result: No CAPI2 11 error occurs.

b. Encouraged, I next restarted my pc with on-board LAN disabled. Result: No CAPI2 11 error, as previously

     reported. Then I enabled my on-board LAN and did a Network Connection diagnose and repair. After verifying

     my network connection to be normal, I again forced a manual check for Windows updates. Result: Still no

    CAPI2 11 error!

Just to recap:

1. Everybody on this thread started experiencing CAPI2 11 errors on 27May, 2009;

2. Except for me, everybody else on this thread installed Windows Vista SP2 on 27May, 2009.  I merely hid mine

    on 27May, 2009 and installed it only on 02June, 2009. Yet, my filtered event logs show that my CAPI2 errors

     also started on 27May, 2009 and occur each time I start my pc (because of my chosen Windows Update

     setting - "check for updates and let me choose ...");

Alex_PH
Was this answer helpful?

0 comments No comments
Anonymous

2009-06-05T19:19:06+00:00

Have you tried re installing the Windows installer?

Visit the article to download the correponding Installer agent.

http://support.microsoft.com/kb/934307

Martin

Microsoft Answers Support Engineer

Visit ourMicrosoft Answers Feedback Forumand let us know what you think
Was this answer helpful?

0 comments No comments