Warning: Problems With Root Certificates Update, KB931125

[Ain'tSoBad]

I am running a SBS 2003 which was working fine until yesterday when we updated the same with KB931125 "Root certificates Update" dated 27th Feb. 2007.” Update process went fine but after the system restarted, we received schannel error 36885 in the event log, saying:

"When asking for client authentication, this server sends a list of trusted certificate authorities to the client. The client uses this list to choose a client certificate that is trusted by the server. Currently, this server trusts so many certificate authorities that the list has grown too long. This list has thus been truncated. The administrator of this machine should review the certificate authorities trusted for client authentication and remove those that do not really need to be trusted."

Any help ?

[Toby-Martin]

I faced this error long before. In my case the problem was hocked up Domain Controller certificate on SBS. In troubleshooting we deleted a number of certificates which helped to fix the schannel errors but though we were not able to use wireless. I noticed that the certificate properties on some of the client PCs appeared not to match the cert on the server, so I deleted the domain controller cert from a client. Auto enrollment did not put it back, but it didn't log any errors either. You should try out doing the same.