Schannel

31 events across 1 channel

Event IDTitleChannel
36864The schannel security package has loaded successfully.System
36865A fatal error occurred while opening the system %1 cryptographic module.System
36867Creating a TLS %3 credential.System
36868The TLS %1 credential's private key has the following properties: CSP name: %2 …System
36869The TLS %3 credential's certificate does not have a private key information …System
36870A fatal error occurred when attempting to access the TLS %3 credential private …System
36871A fatal error occurred while creating a TLS %3 credential.System
36872The TLS %3 specified certificate's chain could not be retrieved: Failure Status: …System
36873No supported cipher suites were found when initiating a TLS connection.System
36874An %3 connection request was received from a remote client application, but none …System
36875The remote server has requested TLS client authentication, but no suitable …System
36876The certificate received from the remote server has not validated correctly.System
36877The certificate received from the remote client application has not validated …System
36878The certificate received from the remote client application is not suitable for …System
36879The certificate received from the remote client application was not successfully …System
36880A TLS %1 handshake completed successfully.System
36881The certificate received from the remote server has either expired or is not yet …System
36882The certificate received from the remote server was issued by an untrusted …System
36883The certificate received from the remote server has been revoked.System
36884The certificate received from the remote server does not contain the expected …System
36885When asking for client authentication, this server sends a list of trusted …System
36886No suitable default server credential exists on this system.System
36887A fatal alert was received from the remote endpoint.System
36888A fatal alert was generated and sent to the remote endpoint.System
36889The TLS %3 specified certificate's chain is incomplete: Failure Status: %4 This …System
36896Verification of the DTLS connection request failed.System
36897DTLS record was rejected because it is outside of current receive window.System
36898A DTLS record was rejected because it is a duplicate of a previously received …System
36899The retransmission of DTLS handshake messages has been requested.System
36912The key material used to protect TLS Session Tickets was not found at %3.System
36928Could not retrieve an OCSP response.System

Event ID 36864 — The schannel security package has loaded successfully.

Provider
Schannel
Channel
System

Message

The schannel security package has loaded successfully.

Event ID 36865 — A fatal error occurred while opening the system %1 cryptographic module.

Provider
Schannel
Channel
System

Message

A fatal error occurred while opening the system %1 cryptographic module. Operations that require the SSL or TLS cryptographic protocols will not work correctly. The error code is %2.

Fields

NameDescription
ModuleName
Error

Event ID 36867 — Creating a TLS %3 credential.

Provider
Schannel
Channel
System

Message

Creating a TLS %3 credential.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Type
__binLength
binaryData

Event ID 36868 — The TLS %1 credential's private key has the following properties: CSP name: %2 CSP type: %3 Key name: %4 Key Type: %5 Key Flags: %6 The attached da...

Provider
Schannel
Channel
System

Message

The TLS %1 credential's private key has the following properties:

   CSP name: %2
   CSP type: %3
   Key name: %4
   Key Type: %5
   Key Flags: %6

 The attached data contains the certificate.

Fields

NameDescription
Type
CSPName
CSPType
KeyName
KeyType
KeyFlags
__binLength
EncodedCert

Event ID 36869 — The TLS %3 credential's certificate does not have a private key information property attached to it.

Provider
Schannel
Channel
System

Message

The TLS %3 credential's certificate does not have a private key information property attached to it. This most often occurs when a certificate is backed up incorrectly and then later restored. This message can also indicate a certificate enrollment failure.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Type
__binLength
binaryData

Event ID 36870 — A fatal error occurred when attempting to access the TLS %3 credential private key.

Provider
Schannel
Channel
System

Message

A fatal error occurred when attempting to access the TLS %3 credential private key. The error code returned from the cryptographic module is %4. The internal error state is %5.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Type
ErrorCode
ErrorStatus

Event ID 36871 — A fatal error occurred while creating a TLS %3 credential.

Provider
Schannel
Channel
System

Message

A fatal error occurred while creating a TLS %3 credential. The internal error state is %4.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Type
ErrorState

Event ID 36872 — The TLS %3 specified certificate's chain could not be retrieved: Failure Status: %4 Flags: %5 The attached data contains the certificate.

Provider
Schannel
Channel
System

Message

The TLS %3 specified certificate's chain could not be retrieved:

   Failure Status: %4
   Flags: %5

 The attached data contains the certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Type
ErrorCode
CertFlags
__binLength
CredContext

Event ID 36873 — No supported cipher suites were found when initiating a TLS connection.

Provider
Schannel
Channel
System

Message

No supported cipher suites were found when initiating a TLS connection. This indicates a configuration problem with the client application and/or the installed cryptographic modules. The TLS connection request has failed.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36874 — An %3 connection request was received from a remote client application, but none of the cipher suites supported by the client application are suppo...

Provider
Schannel
Channel
System

Message

An %3 connection request was received from a remote client application, but none of the cipher suites supported by the client application are supported by the server. The TLS connection request has failed.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Protocol

Event ID 36875 — The remote server has requested TLS client authentication, but no suitable client certificate could be found.

Provider
Schannel
Channel
System

Message

The remote server has requested TLS client authentication, but no suitable client certificate could be found. An anonymous connection will be attempted. This TLS connection request may succeed or fail, depending on the server's policy settings.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36876 — The certificate received from the remote server has not validated correctly.

Provider
Schannel
Channel
System

Message

The certificate received from the remote server has not validated correctly. The error code is %3. The TLS connection request has failed. The attached data contains the server certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
ErrorCode
__binLength
pCertificateContext

Event ID 36877 — The certificate received from the remote client application has not validated correctly.

Provider
Schannel
Channel
System

Message

The certificate received from the remote client application has not validated correctly. The error code is %3. The attached data contains the client certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
ErrorCode
__binLength
pCertificateContext

Event ID 36878 — The certificate received from the remote client application is not suitable for direct mapping to a client system account, possibly because the aut...

Provider
Schannel
Channel
System

Message

The certificate received from the remote client application is not suitable for direct mapping to a client system account, possibly because the authority that issuing the certificate is not sufficiently trusted. The error code is %3. The attached data contains the client certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
ErrorCode
__binLength
pCertificateContext

Event ID 36879 — The certificate received from the remote client application was not successfully mapped to a client system account.

Provider
Schannel
Channel
System

Message

The certificate received from the remote client application was not successfully mapped to a client system account. The error code is %3. This is not necessarily a fatal error, as the server application may still find the certificate acceptable.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
ErrorCode
__binLength
pCertificateContext

Event ID 36880 — A TLS %1 handshake completed successfully.

Provider
Schannel
Channel
System

Message

A TLS %1 handshake completed successfully. The negotiated cryptographic parameters are as follows.

   Protocol version: %2
   CipherSuite: %3
   Exchange strength: %4 bits
   Context handle: %5
   Target name: %6
   Local certificate subject name: %7
   Remote certificate subject name: %8

Fields

NameDescription
Type
Protocol
CipherSuite
ExchangeStrength
ContextHandle
TargetName
LocalCertSubjectName
RemoteCertSubjectName

Event ID 36881 — The certificate received from the remote server has either expired or is not yet valid.

Provider
Schannel
Channel
System

Message

The certificate received from the remote server has either expired or is not yet valid. The TLS connection request has failed. The attached data contains the server certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
__binLength
certificateContext

Event ID 36882 — The certificate received from the remote server was issued by an untrusted certificate authority.

Provider
Schannel
Channel
System

Message

The certificate received from the remote server was issued by an untrusted certificate authority. Because of this, none of the data contained in the certificate can be validated. The TLS connection request has failed. The attached data contains the server certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
__binLength
certificateContext

Event ID 36883 — The certificate received from the remote server has been revoked.

Provider
Schannel
Channel
System

Message

The certificate received from the remote server has been revoked. This means that the certificate authority that issued the certificate has invalidated it. The TLS connection request has failed. The attached data contains the server certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
__binLength
certificateContext

Event ID 36884 — The certificate received from the remote server does not contain the expected name.

Provider
Schannel
Channel
System

Message

The certificate received from the remote server does not contain the expected name. It is therefore not possible to determine whether we are connecting to the correct server. The server name we were expecting is %3. The TLS connection request has failed. The attached data contains the server certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Name
__binLength
certificateContext

Event ID 36885 — When asking for client authentication, this server sends a list of trusted certificate authorities to the client.

Provider
Schannel
Channel
System

Message

When asking for client authentication, this server sends a list of trusted certificate authorities to the client. The client uses this list to choose a client certificate that is trusted by the server. Currently, this server trusts so many certificate authorities that the list has grown too long. This list has thus been truncated. The administrator of this machine should review the certificate authorities trusted for client authentication and remove those that do not really need to be trusted.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36886 — No suitable default server credential exists on this system.

Provider
Schannel
Channel
System

Message

No suitable default server credential exists on this system. This will prevent server applications that expect to make use of the system default credentials from accepting SSL connections. An example of such an application is the directory server. Applications that manage their own credentials, such as the internet information server, are not affected by this.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36887 — A fatal alert was received from the remote endpoint.

Provider
Schannel
Channel
System

Message

A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is %3.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
AlertDesc

Event ID 36888 — A fatal alert was generated and sent to the remote endpoint.

Provider
Schannel
Channel
System

Message

A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal alert code is %3.

   Target name: %5

 The SSPI client process is %2 (PID: %1).
The TLS alert registry can be found at http://www.iana.org/assignments/tls-parameters/tls-parameters.xhtml#tls-parameters-6

Fields

NameDescription
CallerProcessId
CallerProcessImageName
AlertDesc
ErrorState
TargetName

Event ID 36889 — The TLS %3 specified certificate's chain is incomplete: Failure Status: %4 This can cause trust validation failures or interoperability problems.

Provider
Schannel
Channel
System

Message

The TLS %3 specified certificate's chain is incomplete:

   Failure Status: %4

 This can cause trust validation failures or interoperability problems. For more information see KB 954755
 The attached data contains the certificate.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Type
ErrorCode
__binLength
CredContext

Event ID 36896 — Verification of the DTLS connection request failed.

Provider
Schannel
Channel
System

Message

Verification of the DTLS connection request failed.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36897 — DTLS record was rejected because it is outside of current receive window.

Provider
Schannel
Channel
System

Message

DTLS record was rejected because it is outside of current receive window.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36898 — A DTLS record was rejected because it is a duplicate of a previously received record.

Provider
Schannel
Channel
System

Message

A DTLS record was rejected because it is a duplicate of a previously received record.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36899 — The retransmission of DTLS handshake messages has been requested.

Provider
Schannel
Channel
System

Message

The retransmission of DTLS handshake messages has been requested.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName

Event ID 36912 — The key material used to protect TLS Session Tickets was not found at %3.

Provider
Schannel
Channel
System

Message

The key material used to protect TLS Session Tickets was not found at %3.
 The SSPI client process is %2 (PID: %1).

Fields

NameDescription
CallerProcessId
CallerProcessImageName
Path

Event ID 36928 — Could not retrieve an OCSP response.

Provider
Schannel
Channel
System

Message

Could not retrieve an OCSP response.

   The Failure Reason is: %1
    The OCSP Url is: %2
   The previous OCSP response contained the following times:
      ThisUpdate: %3
      NextUpdate: %4

The attached data contains the certificate.

Fields

NameDescription
FailureReason
OCSPResponderURL
ThisUpdate
NextUpdate
__binLength
Certificate