Event ID 4107 from Source CAPI 2 is logged under Windows 2008 R2 in the Application Log
On some of our Windows 2008 R2 Servers we got the following event error:
Log Name: Application
Source: CAPI2
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab (http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab) > with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
After a lot of searching i found this Microsoft-KB-Article which helped to fix the problem on our Servers:
http://support.microsoft.com/kb/2328240
The main steps are:
Open a cmd and enter: certutil -urlcache * delete
Open the following folders an delete the contents of the directorys – make a backup before you do that!! (Maybee not all of the folders exists on your system – than you have to do nothing for that folder)
%windir%ServiceProfilesLocalServiceAppDataLocalLowMicrosoftCryptnetUrlCacheContent
%windir%ServiceProfilesLocalServiceAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
%windir%ServiceProfilesNetworkServiceAppDataLocalLowMicrosoftCryptnetUrlCacheContent
%windir%ServiceProfilesNetworkServiceAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
%windir%System32configsystemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent
%windir%System32configsystemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataDone – now the error message should be gone.
Ive done all this and the error still persists.
Ive done all this as well but it continues every hour, i have a feeling the server needs rebooting now.