1. Запустите проводник. Для этого нажмите кнопку Пуск и последовательно выберите пункты Все программы, Стандартные, Проводник.Примечание. Чтобы найти каталоги, содержимое которых нужно удалить, включите отображение скрытых папок. Для этого выполните указанные ниже действия.
   1. В меню Упорядочить выберите пункт Параметры папок и поиска .
   2. Откройте вкладку Вид.
   3. Установите флажок Показывать скрытые файлы и папки.
   4. Снимите флажок Скрывать расширения для зарегистрированных типов файлов.
   5. Снимите флажок Скрывать защищенные системные файлы.
   6. Закройте предупреждение, нажав кнопку Да. Чтобы применить изменения и закрыть диалоговое окно, нажмите кнопку ОК.
2. Удалите содержимое перечисленных ниже каталогов (%windir% — каталог Windows).Примечание. Иногда может появляться сообщение о том, что у вас нет разрешения на доступ к папке. В таких случаях нажимайте кнопку Продолжить.

   NetworkService
   %windir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
   %windir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

   LocalSystem
   %windir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
   %windir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

Windows 7 Ultimate getting tons of CAPI2- 4107 errors in application event log.

Log Name: Application
Source: Microsoft-Windows-CAPI2
Date: 7/11/2010 11:57:04 AM
Event ID: 4107
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
Failed extract of third-party root list from auto update cab at: with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.
.
Event Xml:

4107
0
2
0
0
0x8080000000000000

3251

Application
Kronos

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

I started getting this error on July 11th at 11:57am CST. I was doing nothing at the time other than browsing. My computer is properly time syncing. It appears that Microsoft is issuing a certificate with bad info, since downloading the cert myself and viewing it says that the certificate is not valid for the requested usage. There are literally over a thousand of these errors now piled up but there seems to be no end in sight. I tripped across them doing a weekly check of the logs. I am experiencing no performance degradation or BSODs. I ran «sfc /scannow» as admin and it found no problems.

The certificate is issued by Microsoft and signed by Microsoft, off of Microsoft servers.

Other places mention that the windows media player media server can cause this but their only fix is to disable the service. Not kosher.

Event 4107 microsoft windows capi2

Вопрос

I have this error message in my eventviewer:

Failed extract of third-party root list from auto update cab at: with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

It freezes up the windows 7 PC whenever this occurs.

Can someone help please, I am not experienced how to correct errors listed in eventviewer.

Ответы

I followed the advice of MS web site, it seemed to have fixed my problem on error 4107:

Thanks for everyone’s help, I surely appreciated all the replies.

:o) I love get conflicting replies.

So please pray tell what did you do in this instance? Love to know.

I have now finally resolved the CAPI2 4107 issue with following method:

Turn off UAC, restart machine and delete all files found in:

Delete all keys under:

Turn back ON UAC, restart

Все ответы

Click the link that shows up in the error log (http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab ), download it and install it manually should fix this error.

Click the link that shows up in the error log (http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab ), download it and install it manually should fix this error.

It doesn’t, since the invalid certificate is in that package. And this since July.

Best greetings from Germany
Olaf

I followed the advice of MS web site, it seemed to have fixed my problem on error 4107:

Thanks for everyone’s help, I surely appreciated all the replies.

:o) I love get conflicting replies.

So please pray tell what did you do in this instance? Love to know.

For me I am able to download it now and I found a .stl file signed by a certificate delivered to Microsoft Certificate Trust List Publisher that expires 09/07/2011.

Please would you care to explain exactly what you did? I am not familiar with EventViewer nor the error codes, nor how to find a non-valid certificate?

Would appreciate :o)

I downloaded the .cab file from this link http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab.

I found into the .cab file a list of trusted certificates. This list was signed by a certificate that is not valid for the required use.

It is strange that a such thing freeze your computer. Are you sure there is no other error IDs?

only one application error with vipre 1000, which I hope I fixed

but the CAPI2 error freezes the pc alright (wonderful lovely windows 7 64 bit) had more trouble with this barely 3 months pc 🙁

Thanks for helping, nice to have support

My PCs do not «freeze», but I can confirm, that the signature shows as not valid for the required use in the downloaded file.
(And it is not fixed, unfortunately.) I will see, if I can escalate the issue to Microsoft.

Best greetings from Germany
Olaf

open an elevated command prompt

run certutil -urlcache * delete —> press enter

this will clear cache of the expired «Microsoft Certificate Trust List Publisher».

Note: If the expired certificate is cached in the system profile, then you will need to run it in the system context. To do this, download PsExec and run the following command before running certutil:
psexec -i -s cmd.exe

latest KB http://support.microsoft.com/kb/2328240 been released

open an elevated command prompt

run certutil -urlcache * delete —> press enter

this will clear cache of the expired «Microsoft Certificate Trust List Publisher».

Note: If the expired certificate is cached in the system profile, then you will need to run it in the system context. To do this, download PsExec and run the following command before running certutil:
psexec -i -s cmd.exe

latest KB http://support.microsoft.com/kb/2328240 been released

So is there any word forthcoming from MS about this matter?

I ask as my event log listed 4107 on the 27th (twice at the same timestamp) and then 31 seconds later the log lists 4108 denoting.

Successful auto delete of third-party root certificate:: Subject: Sha1 thumbprint: .

But sort of oddly once more on the 29th, 4107 again lists and immediately thereafter my NAV2010 stopped running, restarted and seconds later again the application event log immediately lists event 4101 (Winlogon source, stating » Windows license validated.» ).

Not sure what’s going on, some issue with NAV2010, the validation process, or some matter involving MS’s issuances of the authrootstl.cab file, ref. event ID 4107.

Failed extract of third-party root list from auto update cab at: with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

But again, on the 29th and the 30th I got that error and despite the 27th’s entry stating ‘Successful auto delete of third-party root certificate. ‘, and yet still the 4107 event error again lists on the 29th and 30th (and neither subsequently state ‘Successful auto delete of third-party root certificate. ‘.

So any added looking into and/or resolution is appreciated for all concerned.

My best to all and happ-e-trails, yourweldguru