SBS 2008: CAPI2 Event ID 11: Failed extract of third-party root list from auto update cab at . . . /authrootstl.cab

We have a few of these showing up:

Event Properties – Event 11, CAPI2

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

Source: CAPI2
Event ID: 11

The fix is found in the following KB:

• Microsoft KB 2328240: Event ID 4107 or Event ID 11 is logged in the Application log in Windows and in Windows Server

From an elevated command prompt we run:

• certutil –urlcache * delete
• 

We then need to clean out a series of folders.

1. LocalService:
   %windir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
   %windir%\ServiceProfiles\LocalService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

2. NetworkService:
   %windir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
   %windir%\ServiceProfiles\NetworkService\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

3. LocalSystem:
   %windir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content
   %windir%\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData

Once done the CAPI2 errors should be gone.

Philip Elder
MPECS Inc.
Microsoft Small Business Specialists
Co-Author: SBS 2008 Blueprint Book

*Our original iMac was stolen (previous blog post). We now have a new MacBook Pro courtesy of Vlad Mazek, owner of OWN.

Windows Live Writer