Solved Event ID: 36887 Schannel -- The following fatal alert was received: 40

[Ghot]

Just recently I've started to get schannel errors in Event log. Win 7 Home Premium x64

Event ID: 36887 Schannel. They come in two flavors...

The following fatal alert was received: 40.
The following fatal alert was received: 70.
The following fatal alert was received: 70.

They seem to come in groups of 3. One 40 and 2x 70's.

I've Googled a lot about this. But to be honest, it doesn't make much sense to me. Some thing to do with certificates.

Firefox 57.0.4 and previously on Firefox 57.0.3. I didn't notice these errors before the two latest versions of Firefox. Also about the same time, Windows Update (Security Only) KB 4056897... Manual install.
As for IE, I have it UNchecked in "Turn Windows Features On and Off. <---- This has been turned off since Oct 2012

I'm only running the NoScript addon, in Firefox.


Other than the Windows Update and/or the Firefox versions, nothing has changed on my comp.

 

[mrjimphelps]

Try going back to your previous version of Firefox: First, tell Firefox not to check for updates; then download the previous version of Firefox, and save it to your hard drive; then uninstall the current version of Firefox; then install the previous version of Firefox.

After doing the above, do you still get these errors?

 

[Ghot]

Already tried that with Firefox.

More info...

It seems to only happen when I log into the Tumblr website. Doesn't happen on other sites.
From Googling it seems to be a problem with certificates. Like, Tumblr doesn't like my Windows certificates, or visa versa.

 

[mrjimphelps]

NoScript could be blocking an essential script on the Tumblr website.

Try a different browser, such as Opera. Opera is my go-to browser when FF with NoScript doesn't work.

 

[Ghot]

Ok, I finally found the issue. It was an older version of Piriform CCleaner v5.06

When I was done on Tumblr, I would usually run CCleaner, as Tumblr leaves a lot of stuff on your comp. More than some other websites.

Anyways, I manually downloaded CCleaner 5.38, uninstalled 5.06, installed 5.38. Problem is now gone.

 

[ineuw]

Event ID: 36887 Schannel is triggered by websites where the URL was upgraded to https but the locally stored link is still http. I have numerous old bookmarks to forums that have upgraded, but my bookmarks are still http. Some trigger the event 36887, but the majority don't.

 

[john1955]

I know this is an OLD thread but it's obvious that a few issues can cause this error and because this thread comes up in Google searches for Event ID: 36887 Schannel I thought I would comment.

I just got rid of mine by accident. My laptop accesses my home network and after I got the laptop working on it I changed the name of one of the computers on the network. The laptop was trying to access that network drive but could not but it found it by it's new name. So it threw an error (three in a row). I actually gave up trying to figure out the Event ID: 36887 Schannel was but later I looked at File Explorer and deleted the network address that had a red "x" by it and the Event ID: 36887 Schannel just happen to go away.

It always feels good when you fix something no one could help you with. And sometimes it's just luck that we make the connection one thing and the event ID.

Guess I should mention it was a Laptop with Windows 7.
I also did not get the "40" only the "70"