CAPI2 errors

Question

I've been getting these errors since Power-up this morning. I've made no changes since yesterday. I've tried system restore, Image restore, sfc /scannow, removed Ready-Boost USB flash drive and can't find anything wrong. I get one error at PUP, and another error when I check Mail with Live-beta, another error for every message from Forums, and another error every time I enter Forums. 

Log Name:      Application

Source:        Microsoft-Windows-CAPI2

Date:          7/11/2010 1:09:07 PM

Event ID:      4107

Task Category: None

Level:         Error

Keywords:      Classic

User:          N/A

Computer:      George-PC

Description:

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

.

Event Xml:

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">

  <System>

    <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />

    <EventID Qualifiers="0">4107</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8080000000000000</Keywords>

    <TimeCreated SystemTime="2010-07-11T17:09:07.403400000Z" />

    <EventRecordID>6493</EventRecordID>

    <Correlation />

    <Execution ProcessID="1420" ThreadID="2152" />

    <Channel>Application</Channel>

    <Computer>George-PC</Computer>

    <Security />

  </System>

  <EventData>

    <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>

    <Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

</Data>

  </EventData>

**</Event>**Remember - This is a public forum so never post private information such as email or phone numbers!

Ideas:

• Programs you are having problems with
• Error messages
• Recent changes you made to your computer
• What you have already tried to fix the problem

Answer 1

Here's how I fixed mine http://www.petenetlive.com/KB/Article/0000304.htm

Answer 2

I was racking up an impressive log of failures and warnings in the event viewer.  And I was experiencing some OS instability plus hanging in various apps or even in searches.  I found this KB and it really, really works.  I hope MS does a fix and sends it out pre-emptively.  Great!!!!!

Answer 3

See this recent entry in SBS MVP Susan Bradley's blog:

CAPI2 errors driving you crazy?

http://msmvps.com/blogs/bradley/archive/2010/09/02/capi2-errors-driving-you-crazy.aspx

---

~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

Answer 4

Event ID 4107 or 11 is logged in the Application Log in Windows Vista or Windows Server 2008 and later (26 August 2010)

http://support.microsoft.com/kb/2328240 

---

~Robear Dyer (PA Bear) ~ MS MVP (IE, Mail, Security, Windows & Update Services) since 2002 ~ Disclaimer: MS MVPs neither represent nor work for Microsoft

Answer 5

Hi everyone,

For the people receiving the CAPI2 ID 11 “Failed extract of third-party rootlist…” generated in the application log:

·        Click the Pearl (Start) Orb on the Desktop

·        In the Search box typeCMD (do not hit enter)

·       Right-Click cmd.exe and selectRun as administrator

Once the Command Prompt window is open type the following command and press enter.

certutil -urlcache * delete

*Note* There is a space between * & delete

Once it has completed it should show the following:

CertUtil: -URLCache command completed successfully

If the expired certificate is cached in the system profile, then you will need to run it in the system context.

 To do this, download PsExec 

Select Open then Double click PsExec.exe

Select Extract and choose the location, (Take note of this location) make a new folder called PsTools and select Extract

Now Open the Command Prompt as the administrator and browse to the location of the PsTools folder.

So if you extracted to your Desktop the Command Prompt should look like this:

C:\Users&lt;username>\Desktop\PsTools

Type the following and hit enter:

psexec -i -s cmd.exe

A new Command Prompt window should open, from here type the following command again and hit enter:

certutil -urlcache * delete

If these steps do not work use the steps below to enable CAPI2 logging, please copy and paste the details of the error log in this thread.

Click 'Start' > Type Event in the search bar and select 'Event Viewer'

Expand 'Applications and Services Logs'

Expand 'Microsoft'

Expand 'Windows'

Expand 'CAPI2'

Select 'Operational'

On the far right pane > Click 'Enable Log'

---

Cody C

Microsoft Answers Support Engineer

Visit our Microsoft Answers Feedback Forum and let us know what you think.