System Event Viewer keeps experiencing system error, Event 36876, Schannel

Question

System Event Viewer keeps experiencing system error, Event 36876, Schannel The certificate received from the remote server has not been properly validated. The error code is 0x80092012. The TLS connection request failed. Procedure The attached data contains the server certificate.

From the start of the system automatic error, will appear every minute

The following is the detailed information.

• <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
• <System> <Provider Name="Schannel" Guid="{1f678132-5938-4686-9fdc-c8ff68f15c85}" /> <EventID>36876</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2022-12-06T05:27:29.9714119Z" /> <EventRecordID>67444</EventRecordID> <Correlation ActivityID="{ee7e2359-0932-0005-bd23-7eee3209d901}" /> <Execution ProcessID="872" ThreadID="944" /> <Channel>System</Channel> <Computer>LLMYVM00007</Computer> <Security UserID="S-1-5-21-4100730809-2169660554-3909792935-1003" /> </System>
• <EventData> <Data Name="ErrorCode">0x80092012</Data>

<Binary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inary>

</EventData>

</Event>

Answer 1

Hello there,

According to Microsoft this issue may occur if all the following conditions are true:
• The IAS or Routing and Remote Access server is a domain member, but automatic certificate requests functionality (autoenrollment) is not configured in the domain. Or, the IAS or Routing and Remote Access server is not a domain member.
• You manually request and receive a new certificate for the IAS or Routing and Remote Access server.
• You do not remove the expired certificate from the IAS or Routing and Remote Access server. If an expired certificate is present on the IAS or Routing and Remote Access server together with a new valid certificate, client authentication does not succeed. The ""Error 0x80090328"" result that is displayed in the Event Log on the client computer corresponds to ""Expired Certificate.""

---------------------------------------------------------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer--