event 11 cap12 errors

[carl a]

Good morning forum I have an issue in my event application that has constant errors of event 11 capi2 my sfc /scannow is clean disk chkdsk is clean and I have tried a multitude of fixes to no avail, these errors message says failed extract of third party root list update cab at.This computer operating system is windows vista 64 bit and my windows updates service is turned off because as you known vista does not do updates any more . Something is going on with the certificate data I believe but your input is better than my suspicions, here is a picture of my event log and thanks for your input.

 

[Sysnative Windows Update]

Hi,

please export your Application Event Logs and attach them for me.

How to Export Event Viewer Logs – TechSmith Support

 

[carl a]

Softwaremanic its always good to hear from you the tech smith recorder I see is needed to export the logs now the task is learning how to install and operate the tech smith recorder is that correct?

 

[Sysnative Windows Update]

No. that is just the site I used. You can do this directly from the Event Viewer. There is no need to use any other software.

Maybe this tutorial will be better as it has pictures: Exporting and Viewing Windows Event Logs | Knowledge Base

 

[carl a]

everything is set in place I am just having a problem on how to export these logs to you the regular way through sysnative upload the log keep saying that not a valid file.

 

[Sysnative Windows Update]

Oh, you have to zip them up beforehand or use a filesharing service.

 

[carl a]

There you go

 

[Sysnative Windows Update]

Is your system time OK?

Is your CMOS battery OK?

 

[carl a]

Yes both are okay

 

[Sysnative Windows Update]

It appears that a certificate's validity date has expired.

We will try to fix it the following way:

Open CMD as Admin and enter the following:

certutil -urlcache * delete

Press Enter.

Afterwards, make sure the option to hide protected OS files is unchecked and navigate to the following directories:

LocalService:

%windir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
%windir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

NetworkService:
%windir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
%windir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

LocalSystem:
%windir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
%windir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

Delete the contents of each one of them, but not the folders as such.

 

[carl a]

I have performed all the above three times before I even posted that the problem on the forum that is why posted this problem in the forum.I try to do all that I can before I bug you guys because I know that each day many people need your help.I even back up and deleted the hkey local machine \software\microsoft\system certificates\authroot\ certificates in the registry but had the import that registry back in because google chrome was saying that it was insecure and block me from using chrome. Anything else that we can try my computer tech friend?

 

[Sysnative Windows Update]

Does the event occur after doing something specific? For example, installing a particular application/visiting a website?

 

[carl a]

I am not aware when this started to happen I noticed the multitude of errors only because I always looking over the functions of my computer keeping it optimized and running green and clean. Yes it is a certificate validity issue.

 

[xilolee]

That should be an error given by aomei backupper (IIRC).
If it works, just ignore it.

 

[carl a]

Xilolee how are you? So your saying that aomei backupper is the reason for these event 11 i2 errors?

 

[xilolee]

Yup, probably it is.
I switched to macrium reflect free and I don't have those errors anymore.

 

[carl a]

Oh yeah! I will check that out, never used macrium reflect but I will certainty check it out. Thanks for the info.

 

[carl a]

Question what is authrootstl.cab that is on the event viewer log report as a probable fix to this issue here is a picture of the link to down load this device.Log Name: ApplicationSource: Microsoft-Windows-CAPI2
Date: 9/20/2018 3:58:08 PM
Event ID: 11
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: boatman-PC
Description:
Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" />
<EventID Qualifiers="49154">11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2018-09-20T19:58:08.000Z" />
<EventRecordID>10726</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>boatman-PC</Computer>
<Security />
</System>
<EventData>
<Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data>
<Data>A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
</Data>
</EventData>
</Event>

 

[Sysnative Windows Update]

Can you try installing this update and let me know what is the result: Download Update for Windows Vista for x64-based Systems (KB2677070) from Official Microsoft Download Center

 

[carl a]

Thanks for hanging in there with me on solving this issue , I installed the update and waiting for your next instruction.