This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 27/05/2009 8:42:16 PM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Helga-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="49154">11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-05-27T10:42:16.000Z" />
<EventRecordID>32381</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Helga-PC</Computer>
<Security />
</System>
<EventData>
<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
</EventData>
</Event>
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
I don't see any reason the solution above would not work in Vista. I see the same folder structure and registry entries on Vista.
If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries: http://support.microsoft.com/kb/136393
Be sure to use the export option before deleting entries in order to back them up.
This does help.
Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/
None of the posts I had seen on this had mentioned the need for this path.
Thanks,
Michael
hi
Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.
it could also be that direct X is looking for some updated drivers
what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe
have a nice day
ps for some further info
http://technet.microsoft.com/en-us/library/dd772269.aspx
Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!
So I went to the BIOS and changed the current time (well I assumed if I change any value it will force the BIOS setup to overwrite whatever value is currently stored within the RTC). I just increased the minutes by 1. Then I saved and exited the BIOS setup.
Now I rebooted Vista twice and up to now I did not get the error again.
Unfortunately I have to report that Event 11 on CAPI2 source returned on my laptop. I might have been cheated by the WLAN I was using at this location (requires login). As reported already the error is not logged immediately if no internet connection can be established. That's probably why it did not happen this afternoon. Now I returned home, booted the machine and here it is again... :-(
I leave the original message untouched for reference, even if it seems it did not do any change.
I've read that several times on different forums but it did not help in my case. I am using a timeserver to synchronize time and my BIOS time is set correctly.
Actually I found the hint with the system time the most promising to investigate further. I also thought to remember that I read something on the Internet that the cryptography services in Windows do not use the Windows clock/time but instead some weird direct hardware access (RTC?).
Recently I noticed too, that the BIOS on my HP 8510w anyway behaved a bit oddly. The modem entry (to disable the built-in modem) was not showing up any more and the device was missing in the device manager. The solution was to load setup defaults, switch off the machine (remove battery) and then restart the machine.
So I thought let's give it a try, probably the current clock is no properly written to the RTC on Windows shutdown.
So I went to the BIOS and changed the current time (well I assumed if I change any value it will force the BIOS setup to overwrite whatever value is currently stored within the RTC). I just increased the minutes by 1. Then I saved and exited the BIOS setup.
Now I rebooted Vista twice and up to now I did not get the error again.
Probably this will help others too... let us know.
I had the same problems you all had, gosh what happened with me was that i recently did some hardware changes to my machine
I am sure I did not do any hardware upgrade. I am having this error on my HP 8510w - did not even plug USB devices other than memory sticks in the past months. Moreover it's unlikely that many people get the same problem when installing SP2 or more or less at the same date (end of May 2009).
and noticed my DATE has been changed to January 1, 2002... so with the improper date no wonder the security was kicking in. Luckily i spoted this when i was looking into the event viewer. Good luck to everyone if this wasn't also the case.
I've read that several times on different forums but it did not help in my case. I am using a timeserver to synchronize time and my BIOS time is set correctly. Still have the same problem on every reboot. The description on Microsoft web-pages about permissions within the %TEMP% folder does not help either. There is even no user logged on when the error is logged and for sure it's not related to permissions for the logged-in user (SYSTEM/services have full write access to %SystemRoot%\temp of course).
