This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hi, I get this error in the last few weeks and I am not sure, whether I should do something about it. I went to TechNet, Event ID 11 Automatic Root Certificates Update Configuration, but I would need something simpler that I can follow. Confuseduser P.S. Exact error message is below: -
Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 27/05/2009 8:42:16 PM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Helga-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="49154">11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2009-05-27T10:42:16.000Z" />
<EventRecordID>32381</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Helga-PC</Computer>
<Security />
</System>
<EventData>
<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
</EventData>
</Event>
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
I don't see any reason the solution above would not work in Vista. I see the same folder structure and registry entries on Vista.
If you are not familiar with the registry, here is a very detailed instruction set on how to delete entries: http://support.microsoft.com/kb/136393
Be sure to use the export option before deleting entries in order to back them up.
This does help.
Now that you've pointed this out I've seen the same behaviour in the CAPI2 Event Viewer log file. My Windows 7 clients have been trying to access two URL's at the domain http://crl.microsoft.com/
None of the posts I had seen on this had mentioned the need for this path.
Thanks,
Michael
hi
Here's a basic definition for CRL in general terms. You can search Google using "Certificate Revocation List" and find a lot more information.
it could also be that direct X is looking for some updated drivers
what happens is that your browser is checking for provoked certificates , is perfectly normal and safe , its to keep you safe
have a nice day
ps for some further info
http://technet.microsoft.com/en-us/library/dd772269.aspx
Scan with OneCare + 50 Windows 7even Tips + Plagued by the Privacy Center? REMOVE IT + Threat Research & Response Blog + Sysinternals Live tools + TRANSLATOR+ Photosynth + Microsoft Security + Microsoft SUPPORT + PIVOT from Live Labs+ Microsoft Live Labs + Office 2010 beta + Get Windows LIVE!
Usually when I google some error I only find some death forum thread whit only couple of messages on it and no solution. So when I saw the length of this page I was sure that there must be a solution here. Now at the end of the page and after dozen reboots I'm a little disappointed.
I have had the same error as everyone above since 27.5.2009. I have Vista Home Basic sp1.
Could one of these Support Engineers answer a few questions for me:
What is CAPI2?
What is authrootstl.cab?
Is this CAPI2 trying to download it as some update?
Can it be done manually?
What on earth happened on 27.5.2009?
It looks like you might want to check your motherboard manufactuer for a firmware/BIOS update or patch.
You may also want to investigate the CMOS battery to see if it needs replacing.
As I said already, I just tried to adjust the RTC clock because I read some hints that the cryptography service might not use the Windows time. It turned out not to help.
So the Mainboard and CMOS battery are absolutely OK. In addition I don't think all of us here should look for a mainboard/battery replacement and all batteries died within a 1-week timeframe.
In addition this error never happened to me before and also it does not happen on Windows 7 RC. Everything else runs perfectly on the machine and if one Vista service is failing, then I expect Microsoft to have a look at it, trace it and then tell me why it fails. I will accept that all our hardware is broken if Microsoft clearly identifies the source of the problem and tells me which part fails (which seems to be used only by CAPI2).
So it seems very unlikely to me that our hardware is in any way defective. I run Windows XP, Vista-64, Windows 7 and Linux on the machine without any problems.
I get the impression that neither Microsoft/Microsoft stuff nor somebody else has any clue why this error is logged - and I guess developers of the CAPI2 API are not reading here or not interested in solving it.
Let's wait for Windows 7 then and hope we don't have such errors then.
Hi Rainer Meier,
Thanks for using the Answers Forum.
It looks like you might want to check your motherboard manufactuer for a firmware/BIOS update or patch.
You may also want to investigate the CMOS battery to see if it needs replacing.
Hope this helps.
Chris
Microsoft Answers Support Engineer
Visit our Microsoft Answers Feedback Forum and let us know what you think.
