Wsus Crypt32 errors

[Tad]

I keep getting this error everyday at the same time on my WSUS server.
Log: Application
Type: Error
Event: 11
Time: Jan 28 2008 10:46AM
Source: crypt32
Category: None
Username: N/A
Computer: KHQAUPDATE
Description: This event has occurred 2 times from 10:46:08 Jan 28 2008 to
10:46:08 Jan 28 2008.

Failed extract of third-party root list from auto update cab at:
<http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: Access is denied.

I have tried every suggestion at eventid.net but still get the error. Does
anyone have any other suggestion I could try?

Thanks,
Tad

[Augusto Alvarez]

Have you checked any of these two KBs?

http://support.microsoft.com/kb/938397/en-us

http://support.microsoft.com/kb/938759/en-us

Cheers!

--
augusto alvarez | it pro | southworks s.r.l.
http://staff.southworks.net/aalvarez


"Tad" <Tad@discussions.microsoft.com> wrote in message
news:F84B7CBA-68BA-4CC6-8343-49806FAF3600@microsoft.com...
>I keep getting this error everyday at the same time on my WSUS server.
> Log: Application
> Type: Error
> Event: 11
> Time: Jan 28 2008 10:46AM
> Source: crypt32
> Category: None
> Username: N/A
> Computer: KHQAUPDATE
> Description: This event has occurred 2 times from 10:46:08 Jan 28 2008 to
> 10:46:08 Jan 28 2008.
>
> Failed extract of third-party root list from auto update cab at:
> <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab>
> with error: Access is denied.
>
> I have tried every suggestion at eventid.net but still get the error. Does
> anyone have any other suggestion I could try?
>
> Thanks,
> Tad

[Harry Johnston [MVP]]

Tad wrote:

> I keep getting this error everyday at the same time on my WSUS server.
> [...]
> Failed extract of third-party root list from auto update cab at:
> <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: Access is denied.

Does your server have direct access to internet web sites? If it is going
through a proxy that may be blocking access.

You can prevent the server from attempting to update the root certificates by
removing the "Update Root Certificates" Windows component using Add/Remove
Programs. This shouldn't have any unwelcome side-effects provided you install
the root certificate updates when they are released via WSUS.

Harry.

[Harry Johnston [MVP]]

Augusto Alvarez wrote:

> Have you checked any of these two KBs?
>
> http://support.microsoft.com/kb/938397/en-us

If this was the problem it would affect everyone. Also, I doubt Microsoft would
sign files they distribute with a hash algorithm their products don't support.

> http://support.microsoft.com/kb/938759/en-us

This would also affect everyone, and the root certificate updates aren't that
large anyway.

Harry.

[Tad]

It has direct access to internet thru cisco 1812 router no proxy. I tried to
get the lastest version of the cryprt32.dll but couldn't find a place to
download it. Yes I do get root certificate updates thru wsus. I will give
your sugestion a try and will let you know.

Thanks,
Tad

"Harry Johnston [MVP]" wrote:

> Tad wrote:
>
> > I keep getting this error everyday at the same time on my WSUS server.
> > [...]
> > Failed extract of third-party root list from auto update cab at:
> > <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: Access is denied.
>
> Does your server have direct access to internet web sites? If it is going
> through a proxy that may be blocking access.
>
> You can prevent the server from attempting to update the root certificates by
> removing the "Update Root Certificates" Windows component using Add/Remove
> Programs. This shouldn't have any unwelcome side-effects provided you install
> the root certificate updates when they are released via WSUS.
>
> Harry.
>

[Tad]

It has has direct access to the internet on proxy. I tried to get the latest
version but couldn't find where to download it from. I will give your
sugestion and let you know if it works.

Thanks,
Tad

"Harry Johnston [MVP]" wrote:

> Tad wrote:
>
> > I keep getting this error everyday at the same time on my WSUS server.
> > [...]
> > Failed extract of third-party root list from auto update cab at:
> > <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab> with error: Access is denied.
>
> Does your server have direct access to internet web sites? If it is going
> through a proxy that may be blocking access.
>
> You can prevent the server from attempting to update the root certificates by
> removing the "Update Root Certificates" Windows component using Add/Remove
> Programs. This shouldn't have any unwelcome side-effects provided you install
> the root certificate updates when they are released via WSUS.
>
> Harry.
>