Skip to content

Event ID 4107 from Source CAPI 2 is logged under Windows 2008 R2 in the Application Log

21. September 2010

On some of our Windows 2008 R2 Servers we got the following event error:

Log Name: Application
Source: CAPI2
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab (http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab) > with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

After a lot of searching i found this Microsoft-KB-Article which helped to fix the problem on our Servers:
http://support.microsoft.com/kb/2328240

The main steps are:
Open a cmd and enter: certutil -urlcache * delete

Open the following folders an delete the contents of the directorys – make a backup before you do that!! (Maybee not all of the folders exists on your system – than you have to do nothing for that folder)

%windir%ServiceProfilesLocalServiceAppDataLocalLowMicrosoftCryptnetUrlCacheContent
%windir%ServiceProfilesLocalServiceAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
%windir%ServiceProfilesNetworkServiceAppDataLocalLowMicrosoftCryptnetUrlCacheContent
%windir%ServiceProfilesNetworkServiceAppDataLocalLowMicrosoftCryptnetUrlCacheMetaData
%windir%System32configsystemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheContent
%windir%System32configsystemprofileAppDataLocalLowMicrosoftCryptnetUrlCacheMetaDataDone – now the error message should be gone.

Leave a Comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: