How do you troubleshoot and resolve Schannel Errors, Event ID 36888?

tjg79

New member
Power User
VIP
Local time
2:52 PM
Messages
512
I'm getting a slew of Schannel errors on clean install of Win 7 Pro x64. The errors seem to be related to IE and some websites. I've attempted some configuration changes in IE11, but they weren't effective. How do you troubleshoot and resolve Schannel errors as indicated below?

Event 36888, Schannel

General:

The following fatal alert was generated: 43. The internal error state is 252.



Detail:
  • - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    - <System>
    <Provider Name="Schannel"
    Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />

    <EventID>36888</EventID>

    <Version>0</Version>

    <Level>2</Level>

    <Task>0</Task>

    <Opcode>0</Opcode>

    <Keywords>0x8000000000000000</Keywords>

    <TimeCreated SystemTime="2015-12-19T12:19:01.587990700Z" />

    <EventRecordID>52814</EventRecordID>

    <Correlation />

    <Execution ProcessID="904" ThreadID="5680" />

    <Channel>System</Channel>

    <Computer>TJG-DT1</Computer>

    <Security UserID="S-1-5-18" />

    </System>


    - <EventData>
    <Data Name="AlertDesc">43</Data>

    <Data Name="ErrorState">252</Data>

    </EventData>


    </Event>
Screenshot 1.jpg
 

My Computer My Computer

At a glance

Windows 7 Professional x64 SP1Intel i7-980x @ 3.6GHzCorsair 12GB DDR3 RAM (3x4GB)EVGA NVIDIA GeForce GTX 760 SC
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Custom Build
OS
Windows 7 Professional x64 SP1
CPU
Intel i7-980x @ 3.6GHz
Motherboard
Intel DX58SO
Memory
Corsair 12GB DDR3 RAM (3x4GB)
Graphics Card(s)
EVGA NVIDIA GeForce GTX 760 SC
Sound Card
Intel High Definition 7.1 Audio Subsystem - Realtek ALC889
Monitor(s) Displays
Dual Display - LG Electronics Flatron L227WTG
Screen Resolution
1680 x 1050 60Hz 32-bit
Hard Drives
2 Seagate Constellation ST1000NM0033 1TB SATA 6Gb/s HDDs configured as Intel SATA Array 0, RST RAID 1, Vol. 0 (C:\) & Vol. 1 (D:\), & 2 Seagate Barracuda ST500DM002 500GB SATA 6Gb/s HDDs configured as Intel SATA Array 1 RST RAID 1, Vol. 0 (E:\)
PSU
Corsair HX850W
Case
Antec P182
Cooling
Stock Intel i7-980x Cooling Solution + 4 120mm Case Fans
Keyboard
Microsoft Wireless Multimedia Keyboard 1.1
Mouse
Microsoft Standard Wireless Optical Mouse
Internet Speed
DSL - 3.0 Mb/s download 768 Kb/s upload
Antivirus
ESET Smart Security 12, Defender & SuperAntiSpyware Pro
Browser
Firefox Quantum 64-bit
Other Info
Optical Drives: Pioneer DVR-216R & TSSTcorp SH-S223Q, Anker USB 3.0 PCI-E Card, Hauppauge WinTV-HVR 2250 Dual TV Tuner Board for Windows Media Center, Bose Companion 3 Series II multimedia speaker system, APC Smart-UPS SMT1500
Hello tjg mate not sure of this one but this may help - or not
Welcome to Microsoft answers.
· What is the Operating System installed on your computer?
· Have you made any recent changes on the computer?
Note: SChannel means secure channel.
sChannel uses TLS for security encryption. As long as the sites you visit do not use TLS.
Follow the steps below:
1. Open Internet Explorer.
2. Click Tools.
3. Click Internet Options.
4. Click Advanced tab.
5. Scroll down the list under Security, uncheck all the Use TLS options.
6. Click OK.
Now restart the computer and check if the issue still occurs.
If the issue still persists, then I suggest that you optimize the internet explorer settings on the computer.
Follow the steps in the link below:
How to optimize Internet Explorer: Download Web Browser - Internet Explorer
If the above steps do not help you, then you may try resetting the internet explorer settings on the computer, you may download the Microsoft fix-it from the above link which automatically resets the browser settings to default settings on the computer.
For the Bluescreen issue, we require the exact error code or error message to troubleshoot further with this issue. To get the exact error code or error message you may have to disable the automatic Feature.
Follow these easy steps to disable the automatic restart feature for system failures.
1. Click Start.
2. Type System in Start Search.
3. Click on System under Control Panel.
4. In the task pane on the left, click the Advanced system settings link.
5. Locate the Startup and Recovery area and click on the Settings button.
6. In the Startup and Recovery window, locate and uncheck the check box next to Automatically restart.
7. Click OK in the Startup and Recovery window.
8. Click OK in the System Properties window.
9. You can now close the System window.
10. From now on, when a problem causes a BSOD or another major error that halts the system, the PC will not automatically reboot. Rebooting manually will be necessary.
Now when the blue screen occurs make a note of the error code or error message provide us the same.
If you are using Vista Operating System, you may refer the link below:
Microsoft Security Bulletin MS09-007 - Important
Vulnerability in SChannel Could Allow Spoofing (960225): Microsoft Security Bulletin MS09-007 - Important
 

My Computer My Computer

At a glance

Desk1 7 Home Prem / Desk2 10 Pro / Main lap A...Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i...Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop...Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Own build (new) Desk1 / Asus ROG Win 7 / Desk2 1st build
OS
Desk1 7 Home Prem / Desk2 10 Pro / Main lap Asus ROG 10 Pro 2 laptop Toshiba 7 Pro Asus P2520 7 & 10
CPU
Desk1 i5 3750K / Laptop i7 GTX 860M / Desk2 i5 2500
Motherboard
Desk1 Asus P877-V / Desk2 Gigabyte H67 UD3H / Laptop ?
Memory
Desk1 8GB (1866) / Desk2 16GB (1333) / Laptop 8Gb DDR3
Graphics Card(s)
Desk 1& 2NVidia GTX 650 & Laptops on board Intel
Sound Card
Desk 1 & 2 -XONAR DG Realtek High Def audio Laptop
Monitor(s) Displays
Desk 1 Benq HD 2450 / Desk2 Philips 24" / Laptop 17.5"
Screen Resolution
1920x1080 D1 & D2 & Laptop 1
Hard Drives
Desk1 Samsung 120GB 830 SSD
Asus ROG 256GB 850 Pro SSD
Desk2 Samsung 840 256 SSD
Toshiba 120GB EVO
PSU
Desk 1 Corsair HX 1050/ Laptop ? / Desk 2 Corsair HX 650
Case
Desk 1 Cooler HAF XM ? Toshiba laptop / Desk2 Coolermaster
Cooling
Fans on all Desk1 -2 Desk2 - all Coolermasters 5 Laptop ?
Keyboard
Desk 1 MS Sidewinder X6 Desk 2 MS Sidewinder X 4
Mouse
Desk 1&2 - Gigabyte MS 900 gamer - laptop - Logitec wireless
Internet Speed
ADSL2+
Other Info
One other Desktop (tester) and spare Toshba laptop both with SSD's
Running Kaspersky 2016 ISS on all machines config'd identically
Logitec audio stereo systems on each machine (x3)
Canon MG5250MFC
Router/modem TP-Link running WPA2SK
Hi tjg, ICIT2.

You say this is a clean install, have you completed installing all Windows Updates?

Back around November of 2014 the schannel vulnerability kicked into high gear and microsoft was pushing a lot of schannel updates to control it. I'm not sure how many there were but this google search on schannel vulnerability may help, the first one stopped any web access that had MS14-066 installed, and there were several reissues of the update.
Right now I have SSL 2 and 3 un-checked and all TLS's checked on my IE11 >Internet Options >Advanced tab.

If you have all your updates, I found this, thanks for filling in your system specs I see you also use ESET:
I also have it and it (windows consumer preview) and it appears to be a port permissions problem with a malware app firewall (ESET)

Source, sixth post down: https://Frequent Event ID 36888 Windows Schannel errors in the Event Viewer | social.technet.microsoft.com/Forums
Later on in this thread someone mentions turning off TLS1, Talk has subsided about the black hats hacking TLS1, and I haven't heard anything in awhile.
 

My Computer My Computer

At a glance

Originally Win 7 Hm Prem x64 Ver 6.1.7600 Bui...Intel i3 530 2.93GHz, 2933MHz 2 Cores 4 Logic...6GB of 1,333MHz DDR3 SDRAM32MB Intel Graphics Media Accelerator HD IGChip
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Gateway DX4831-01e (Mid-Tower Desktop)
OS
Originally Win 7 Hm Prem x64 Ver 6.1.7600 Build 7601-SP1 | Upgraded to Windows 10 December 14, 2019
CPU
Intel i3 530 2.93GHz, 2933MHz 2 Cores 4 Logical Processors
Motherboard
Gateway H57M01 133 megahertz
Memory
6GB of 1,333MHz DDR3 SDRAM
Graphics Card(s)
32MB Intel Graphics Media Accelerator HD IGChip
Sound Card
Realtek High Definition Audio
Monitor(s) Displays
Gateway HX2000 20inch TFT active matrix TN
Screen Resolution
1600 x 900 x 59 hertz
Hard Drives
WDC WD10EADS-00M2B0 [HDD] (1000.20 GB) -- drive 0,
HL-DT-ST DVDRAM GH41N [CD-ROM dr]
Four card readers, and Four USB 2.0
PSU
300watts.
Case
Mid-Tower Desktop
Cooling
Stock from Gateway
Keyboard
Natural Ergonomic Keyboard 4000, see Other Info
Mouse
Orig. Gateway wore out now using Insignia USB wired optical
Internet Speed
Vz FIOS 10ms png 57.64Mbps down 65.53Mbps up Speedtest.org
Antivirus
Zamana Anti-logger with Anti-malware, MSE, Windows Firewall,
Browser
IE11.0.9600.19399-Upd ver11.0.135, Firefox 68.0.1 x64
Other Info
System Specs by Belarc.

BIOS: American Megatrends Inc. P01-A0 11/17/2009

Replaced the MS 'Natural' Standard PS/2 Enhanced 101-102 Keyboard with a new Natural Ergonomic Keyboard 4000 on August 1st 2014.

Canon Pixma MG3222 Printer.

Updated to IE11 on 12102015 | Fios Quantum Router g1100

Additional AV: SpywareBlaster, manual Mbam, SAS
Back
Top