Recurring Certificate Expiration Issue for `taskhostw.exe` Right After Fresh Windows Install

Question

Hello Microsoft Community,

I am experiencing a recurring issue with expired certificates for taskhostw.exe on my Windows 10 PC. I am just noticing the problem now but can see it started just two days after I performed a fresh installation of Windows, and in that time (1 year) I have gotten about a dozen of these errors. I would appreciate any help or guidance on resolving this issue.

Problem Description:

• Error in Event Viewer: A certificate for taskhostw.exe has expired. Thumbprint: 99aec08668bd760c46f5b5aadff4f0d5c565f470 EKUs: Client Authentication, IP Security End System
• The error first appeared two days after installing Windows and continues to occur regularly.
• Each occurrence has a unique thumbprint but lists the same EKUs and OID numbers.

Troubleshooting Steps Taken:

1. I ran a PowerShell script to search for the certificate across all stores but found no results.
2. Checked System Integrity:
   • Ran sfc /scannow and DISM commands sfc /scannow DISM /Online /Cleanup-Image /CheckHealth DISM /Online /Cleanup-Image /ScanHealth DISM /Online /Cleanup-Image /RestoreHealth
3. Ensured System is Updated:
   • Installed all available Windows updates.

Questions:

1. What could be causing these recurring certificate expiration issues for taskhostw.exe so soon after a fresh Windows installation?
2. Are there any specific configurations or settings I should check or modify to resolve this issue?

Any help or guidance would be greatly appreciated. Thank you in advance!

***moved from Windows / Windows 10 / Performance and system failures***

Answer 1

Hello xake83k,

Thank you for posting in Microsoft Community forum.

First thing I think, you should find such certificate as described in event viewer.

A certificate for taskhostw.exe has expired.

Thumbprint: 99aec08668bd760c46f5b5aadff4f0d5c565f470

EKUs: Client Authentication, IP Security End SystemThen you can try to check the actual expiration time of the certificate.

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,

Daisy Zhou

Answer 2

I found the certificate. I know it's the same one because F900DF260332AC7F is the same name listed in the event. As you can see it's related to Xbox Live. But why is it found in the "personal" section of the MMC? Googling the name of the certificate shows for many people it expires every day. Currently mine is expired, which is strange. When will it renew? Very weird for a certificate for a core part of Windows to be managed in this manner, no?

Answer 3

Hello

Good day!

You can check the issuance date (Valid from) and expiration date (Valid to) of the certificate.

You can check the Serial number or Thumbprint of the certificate to determine if it is the certificate you are looking for.

If the certificate is not expired, you can renew it by right clicking it and selecting renew certificate with new key or with the same key.

If the certificate is expired, you can not renew it. If you still need such certificate, you can request or issue it again.

Best Regards,
Daisy Zhou

Answer 4

The thumbprint and CN both do match. And if you google the certificate it seems this is its default behavior to expire every day. Why is that? And why is it in the "personal" section of the MMC? It's for a core component of windows (Xbox)

Answer 5

Hello

Thank you for your reply.

If the certificate is related to Xbox, I suggest you can post your question again and select the Gaming and Xbox production.

I think engineers who specialize in Xbox will give you professional answers. I'm sorry, but I'm an engineer working on AD DS products.

If you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou