Getting a Load of Event 4107, CAPI2 in the Application Log
I have a huge number of these in the Application log -- any guidence on what they mean would be helpful.This is a relatively clean Windows 7 x64 system with Office 2007 and Visual Studio 2008.The online help just says:Results for: Microsoft Product: Windows Operating System; Version: 6.1.7600.16385; Event ID: 4107; Event Source: Microsoft-Windows-CAPI2; No results were found for your query. Please see Search Help for suggestions. Details:Log Name: ApplicationSource: Microsoft-Windows-CAPI2Date: 8/10/2009 10:14:39 PMEvent ID: 4107Task Category: NoneLevel: ErrorKeywords: ClassicUser: N/AComputer: NYW7-0010Description:Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid..Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" /> <EventID Qualifiers="0">4107</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2009-08-11T02:14:39.776932800Z" /> <EventRecordID>1330</EventRecordID> <Correlation /> <Execution ProcessID="1076" ThreadID="3156" /> <Channel>Application</Channel> <Computer>NYW7-0010</Computer> <Security /> </System> <EventData> <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data> <Data>The data is invalid.</Data> </EventData></Event>
August 19th, 2009 10:25pm

Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> Try downloading it and manually installing it.At the beginning of this year, I had run into a similar problem with Vista. I eventually determined it was rejecting a signed MS certificate, one whose certifying authority was again MS. So, the error descriptionwasn't quite consistent with the problem. Double-clicking the .cab and manually installing that certificate didn't help anything; I could really find nothing wrong with it. It just seemed that something else was going wrong when it was being referenced somehow. Ultimately, I discovered that Windows Media Player Network SharingService was the source of the event, and since I don't use that, I just disabled the service. Problem solved (for me).My story in the paragraph above probably doesn't pertain to your situation. I include it only as an example to prepare you for the indirect reasoning you might need to apply after downloading that .cab file. Good luck.Or maybe, just ignore it.
Free Windows Admin Tool Kit Click here and download it now
August 20th, 2009 3:20am

Saberman, it seems as if it is failing trying to update a 3rd party security certificate. I agree with derosnec's suggestion.Let usdisable the Windows Media Player Network Sharing Service to check the result. After doing some research, I found some information related this error message. Please refer to Automatic Root Certificates Update ConfigurationI hope the above information is useful for you. :)
August 21st, 2009 5:20am

I agree that's what it seems to be.I just now dug up a sample log that my computers (plural) recorded. Here is one:Log Name: ApplicationSource: Microsoft-Windows-CAPI2Date: 12/26/2008 12:22:53 AMEvent ID: 11Task Category: NoneLevel: ErrorKeywords: ClassicUser: N/AComputer: derosnec-PCDescription:Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid.I also followed the instructions from the Event Viewer link: Event Log Online HelpThenI found the .cab in Temp (or wherever, it's been a long time since it happened). There is nothing wrong with the folders' permissions. I examined the .cab and could findno problems with it either. Then I downloaded the .cab to the desktop and manually loaded it. And then spent a lot of time tinkering and studying it. That is how I found that MS was the certifying authority of that MS certificate. So it seems that MS is the 3rd party that MS is certifying.I decided that onlinehelp page was useless.It makes me want to scream.Here. I just went through the exercise again. I downloaded it, extracted the certificate, and examined it via right-click Properties. Too bad I cannot cut-and-paste its info here. I'll transcribe. On the Digital Signatures [Details]> General [View Certificate]page, it says:Certificate InformationThis certificate is not valid for the selected purpose.Issued to: Microsoft Certificate Trust List PublisherIssued by: Microsoft Certificate Trust List PCAValid from 4/11/2009 to 7/11/2010See the problem?
Free Windows Admin Tool Kit Click here and download it now
August 21st, 2009 9:32am

Hi saberman,Does derosnec's suggestion fix this issue?:)Candice
August 28th, 2009 4:04am

getting this too in Win7/64 (7600) now...guess I'll just ignore it Log Name: Application Source: Microsoft-Windows-CAPI2 Date: 10/5/2009 10:32:07 PM Event ID: 4107 Task Category: None Level: Error Keywords: Classic User: N/A Computer: Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. . Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" EventSourceName="Microsoft-Windows-CAPI2" /> <EventID Qualifiers="0">4107</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8080000000000000</Keywords> <TimeCreated SystemTime="2009-10-05T20:32:07.518867300Z" /> <EventRecordID>4519</EventRecordID> <Correlation /> <Execution ProcessID="960" ThreadID="5732" /> <Channel>Application</Channel> <Computer>******</Computer> <Security /> </System> <EventData> <Data>http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab</Data> <Data>The data is invalid. </Data> </EventData> </Event>
Free Windows Admin Tool Kit Click here and download it now
October 5th, 2009 5:20pm

I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues.
October 7th, 2009 11:15am

I chose to ignore it as I was informed this problem would be addressed by MS in future updates. It causes me no performance issues. I think I'll go with your approach. It fits into my work schedule rather well.
Free Windows Admin Tool Kit Click here and download it now
October 7th, 2009 5:12pm

Anything new on this topic ? I get about 20 errors like this per day on my system (windows 7 / 64bit) which is really annoying. regards DS
October 29th, 2009 5:34am

I am no longer using the Windows 7 RC Ultimate 64 bit version. I am now using the "official" version of Windows 7 Home Premium.And after updating my printer and video drivers at Lexmark and Nvidia to the Windows 7 version I have had no more errors.
Free Windows Admin Tool Kit Click here and download it now
October 30th, 2009 1:05pm

Anything new on this topic ?I get about 20 errors like this per day on my system (windows 7 / 64bit) which is really annoying.regardsDS Since this thread has already been marked as 'answered', you may have better results if you post this again as a new question.
October 30th, 2009 1:12pm

Hi saberman,Does derosnec's suggestion fix this issue?:)Candice Just one more bug to be ignored for the time being. Of course it does make troubleshooting other problems more difficult as you have to filter out the bogus events.Since the security check on the certificate is failing and it appears not to have any impact on the system's operation does that mean that certificate checking is just a cosmetic? That is, something that is done to make it appear it enhances security?
Free Windows Admin Tool Kit Click here and download it now
October 30th, 2009 2:51pm

See my Side by Side error. It is almost identical. I deleted the .dll file and have to wait and see since the error only occurs at 12:33 am.
October 31st, 2009 9:40pm

Since 2 days suddenly no more errors - no idea why....
Free Windows Admin Tool Kit Click here and download it now
November 2nd, 2009 4:20am

I deleted the whole folder labeled 'Search Helper' that the 'http://schemas...' line was in and I haven't had any errors since. Since there weren't any updates it can't be something MS did.
November 2nd, 2009 5:03am

Here's how I fixed mine http://www.petenetlive.com/KB/Article/0000304.htm
Free Windows Admin Tool Kit Click here and download it now
August 2nd, 2010 7:12am

please follow this KB http://support.microsoft.com/kb/2328240 release on 26 august 2010
September 2nd, 2010 5:23am

Didn't work for me on two different servers. I'm trying to install a MSP file. Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.Bradley
Free Windows Admin Tool Kit Click here and download it now
September 3rd, 2010 2:49pm

That did it. Thanks! Also, the other advice given here: http://msmvps.com/blogs/bradley/archive/2010/09/02/capi2-errors-driving-you-crazy.aspx
September 9th, 2010 9:31pm

http://support.microsoft.com/kb/2328240 has info on this for those still in need
Free Windows Admin Tool Kit Click here and download it now
February 12th, 2011 3:00am

I am having this problem too, but can't find any solutions. My Log: Log Name: Application Source: Microsoft-Windows-CAPI2 Date: 20/05/2012 10:20:07 AM Event ID: 4107 Task Category: None Level: Error Keywords: Classic User: N/A Computer: MyPC Description: Failed extract of third-party root list from auto update cab at: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: The data is invalid. Please note the description is NOT: "A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file." but is " with error: The data is invalid." I have run additional logging on CAPI2 and found the offending program is "consent.exe". I can post these if they are relevant. I tried disabling the "Windows Media Player Network Sharing Service", which initially I thought had worked as I did not think I saw any errors upon the next reboot, however the above metioned error is still occuring, and I still have the "Windows Media Player Network Sharing Service" disabled. Hoping someone can assist me further with this.
May 21st, 2012 8:46pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics