What is this??: Crypt32 error in application event log

[hedan]

Hi,
I'm getting these entries in the application event log. Each time I get
this message there are always three identical entries at the exact same
time. Then it can go some hours, and three new entries are created...
Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 11
Date: 2005-02-16
Time: 14:57:42
User: N/A
Computer: HHD2
Description:
Failed extract of third-party root list from auto update cab at:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
with error: A required certificate is not within its validity period
when verifying against the current system clock or the timestamp in the
signed file.

At the same time I also get these two entries in the log which are
successful:
#1
Event Type: Information
Event Source: crypt32
Event Category: None
Event ID: 7
Date: 2005-02-16
Time: 14:57:41
User: N/A
Computer: HHD2
Description:
Successful auto update retrieval of third-party root list sequence
number from:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt>
#2
Event Type: Information
Event Source: crypt32
Event Category: None
Event ID: 2
Date: 2005-02-16
Time: 14:57:42
User: N/A
Computer: HHD2
Description:
Successful auto update retrieval of third-party root list cab from:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>

What is this? Do I need it? How can I fix it so that it works as it
should?

Many thanks in advance for any help.
/Henrik

 

[Mark Dormer]

Some info
http://www.eventid.net/display.asp?eventid=11&eventno=2686&source=crypt32&phase=1

Regards
Mark Dormer

 

[Bill Raudabaugh]

We started seeing this problem on a Win 2003 server yesterday. Manually
downloading like the article suggested showed that the certificate currently
on the windowsupdate site expired Feb 15 at 3am. So I'm guessing this error
will continue until Microsoft updates the certificate on their end.

 

[hedan]

Bill,
thank you very much for your reply on this issue. I would probably have
continued to look for a problem on my side for quite some time in order
to solve this problem if you wouldn't have posted this information.
I'll just simply keep an eye on this in the log to see if it starts
working again. I guess that as time goes by more and more computers
will see this in their log (unless Microsoft renews their certificate)
as their computers tries to look for an update of third-party root
list.

Again, thank you!

/Henrik

 

[Bill Raudabaugh]

Well I just spent an hour on the phone with Microsoft and by the time I got
through to a tech they had updated the certificate on windowsupdate site.
The crypt32 errors are gone on my servers now. You should not be seeing the
error anymore either.

Gee, it would have been nice if they had updated the certificate BEFORE IT
EXPIRED!!! Would have saved me a day and a half.

 

[hedan]

Hi again,
Well, I also tried to manually download this now, but it still doesn't
seem valid for me. I really don't know much about certificates, but
when I try to open the certificate, it says: "This certificate trust
list is not valid. The certificate that signed the list is not valid."
The only date that I can see is effective date which is Feb 11 at 4am
(which I guess is in GMT+1). There is no expiration date or so stated.
How can I tell what is wrong know, perhaps that Windows Server 2003
uses another certifiate than Windows XP (but I guess not). I downloaded
it from
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab.
Does your still work ok for you if you try to open it?
Thanks in advance!
/Henrik

 

[Goqo]

Crypt32 error in application event log

Hi Hedan, Mark, Henrik

were you gentlemen eventually able to resolve Cryptography32 error, with regards to the MS Certificates expiring... I seem to be experiencing the same problem...

Rgds
Nkululeko