Event ID 36888 - Schannel - A fatal alert was generated and sent to the remote endpoint.

Exchange 2013:  2 x multi-role in one DAG - on-premise

Performing remote mailbox migration using internet (*non-exchange web-based  tool*), to ship data from cloud Ex2010 server to Ex013 on-premise.

Have multiple failures when doing the mailbox data copy - my migration tool error code tells me that:

This error indicates that we were unable to authenticate to the source or destination mailbox and retrieve a list of folders when given 15 minutes to complete these operations. This may be because the source or destination is unusually slow, has a very large number of folders, or due to "hanging" networking calls.

Some mailboxes are copying, but around 80% are not.  Checked all permissions and other factors.

I see in the System event log the following below:

Log Name:      System
Source:        Schannel
Date:          9/14/2013 2:14:53 PM
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      server.domain.local
Description:

A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
    <EventID>36888</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-09-14T20:14:53.699840000Z" />
    <EventRecordID>135625</EventRecordID>
    <Correlation />
    <Execution ProcessID="544" ThreadID="17928" />
    <Channel>System</Channel>
    <Computer>server.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="AlertDesc">10</Data>
    <Data Name="ErrorState">1203</Data>
  </EventData>
</Event>

Anyone seen this? - not much recording this error available for Ex2013.

September 14th, 2013 8:35pm

Hello,

Thank you for your post.

This is a quick note to let you know that we are performing research on this issue.

If you have feedback for TechNet Subscriber Support, contact tnsfl@microsoft.com

Free Windows Admin Tool Kit Click here and download it now
September 17th, 2013 1:30am

Hello,

Thank you for your post.

This is a quick note to let you know that we are performing research on this issue.

If you have feedback for TechNet Subscriber Support, contact tnsfl@microsoft.com

September 17th, 2013 2:52am

Hi S_A_T,

Thank you for keeping us updated.

I hope we can find the root cause soon. Appreciate your sharing later.

Thanks,

If you have feedback for TechNet Subscriber Support, contact tnsfl@microsoft.com

Free Windows Admin Tool Kit Click here and download it now
September 17th, 2013 7:47am

Had a SEV B call open with MS Support to track and resolve the issue.

After 7 days of network traces, log file dumps and at least 20 hours on the phone...the issue remains unresolved and is currently with the EWS team.

Will update thread if answer  ever found.

September 24th, 2013 10:05pm

Also having this - hoping for resolution...
Free Windows Admin Tool Kit Click here and download it now
October 22nd, 2013 6:55pm

Any news yet?
November 13th, 2013 9:43am

Hello,

Thank you for your post.

This is a quick note to let you know that we are performing research on this issue.

If you have feedback for TechNet Subscriber Support, contact tnsfl@microsoft.com

Free Windows Admin Tool Kit Click here and download it now
November 17th, 2013 4:13am

Still no response from MS support on this?
December 2nd, 2013 3:20pm

Hello  S_A_T,

Please refer to following article to handle event ID 36888 :-

http://ficility.net/2013/10/21/exchange-2013-exchange-2010-windows-server-2012-schannel-event-id36888-1203-tlsssl-error-the-root-cause/
http://social.technet.microsoft.com/Forums/forefront/en-US/92c63737-c2a3-41f7-8878-3b0cf5ee95ff/new-install-event-log-schannel-event-id-36888?forum=Forefrontedgegeneral

Thanks
David Jones

References :- 
http://ficility.net/2013/10/21/exchange-2013-exchange-2010-windows-server-2012-schannel-event-id36888-1203-tlsssl-error-the-root-cause/
http://social.technet.microsoft.com/Forums/forefront/en-US/92c63737-c2a3-41f7-8878-3b0cf5ee95ff/new-install-event-log-schannel-event-id-36888?forum=Forefrontedgegeneral
http://www.recoveryfix.com/exchange-server-recovery.html (Third Party Tool)

Free Windows Admin Tool Kit Click here and download it now
December 5th, 2013 10:38am

I got same Issue with new exchange 2013. did you find a solution?
December 30th, 2013 1:23pm

If you are facing the corruption issue in your Exchange Server database, there are some important and useful information for repairing a corrupt EDB File of Exchange server. This is an Exchange Server Recovery software, that helps you to repair corrupted EDB File and also convert them into usable Outlook PST file. It's also repair exchange database or recover priv1.edb from corrupt or damaged Exchange server and easily convert exchange EDB to PST.

You can get more details about this advanced software from here : http://www.softmagnat.com/exchange-server-recovery.html

Free Windows Admin Tool Kit Click here and download it now
July 13th, 2015 6:19am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics