How do you troubleshoot and resolve Schannel Errors, Event ID 36888?

[tjg79]

I'm getting a slew of Schannel errors on clean install of Win 7 Pro x64. The errors seem to be related to IE and some websites. I've attempted some configuration changes in IE11, but they weren't effective. How do you troubleshoot and resolve Schannel errors as indicated below?

Event 36888, Schannel

General:

The following fatal alert was generated: 43. The internal error state is 252.



Detail:

• - <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  - <System>
  <Provider Name="Schannel"
  Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
  
  <EventID>36888</EventID>
  
  <Version>0</Version>
  
  <Level>2</Level>
  
  <Task>0</Task>
  
  <Opcode>0</Opcode>
  
  <Keywords>0x8000000000000000</Keywords>
  
  <TimeCreated SystemTime="2015-12-19T12:19:01.587990700Z" />
  
  <EventRecordID>52814</EventRecordID>
  
  <Correlation />
  
  <Execution ProcessID="904" ThreadID="5680" />
  
  <Channel>System</Channel>
  
  <Computer>TJG-DT1</Computer>
  
  <Security UserID="S-1-5-18" />
  
  </System>
  
  
  - <EventData>
  <Data Name="AlertDesc">43</Data>
  
  <Data Name="ErrorState">252</Data>
  
  </EventData>
  
  
  </Event>
  

 

[ICIT2LOL]

Hello tjg mate not sure of this one but this may help - or not

Welcome to Microsoft answers.
· What is the Operating System installed on your computer?
· Have you made any recent changes on the computer?
Note: SChannel means secure channel.
sChannel uses TLS for security encryption. As long as the sites you visit do not use TLS.
Follow the steps below:
1. Open Internet Explorer.
2. Click Tools.
3. Click Internet Options.
4. Click Advanced tab.
5. Scroll down the list under Security, uncheck all the Use TLS options.
6. Click OK.
Now restart the computer and check if the issue still occurs.
If the issue still persists, then I suggest that you optimize the internet explorer settings on the computer.
Follow the steps in the link below:
How to optimize Internet Explorer: Download Web Browser - Internet Explorer
If the above steps do not help you, then you may try resetting the internet explorer settings on the computer, you may download the Microsoft fix-it from the above link which automatically resets the browser settings to default settings on the computer.
For the Bluescreen issue, we require the exact error code or error message to troubleshoot further with this issue. To get the exact error code or error message you may have to disable the automatic Feature.
Follow these easy steps to disable the automatic restart feature for system failures.
1. Click Start.
2. Type System in Start Search.
3. Click on System under Control Panel.
4. In the task pane on the left, click the Advanced system settings link.
5. Locate the Startup and Recovery area and click on the Settings button.
6. In the Startup and Recovery window, locate and uncheck the check box next to Automatically restart.
7. Click OK in the Startup and Recovery window.
8. Click OK in the System Properties window.
9. You can now close the System window.
10. From now on, when a problem causes a BSOD or another major error that halts the system, the PC will not automatically reboot. Rebooting manually will be necessary.
Now when the blue screen occurs make a note of the error code or error message provide us the same.
If you are using Vista Operating System, you may refer the link below:
Microsoft Security Bulletin MS09-007 - Important
Vulnerability in SChannel Could Allow Spoofing (960225): Microsoft Security Bulletin MS09-007 - Important

 

[Anak]

Hi tjg, ICIT2.

You say this is a clean install, have you completed installing all Windows Updates?

Back around November of 2014 the schannel vulnerability kicked into high gear and microsoft was pushing a lot of schannel updates to control it. I'm not sure how many there were but this google search on schannel vulnerability may help, the first one stopped any web access that had MS14-066 installed, and there were several reissues of the update.
Right now I have SSL 2 and 3 un-checked and all TLS's checked on my IE11 >Internet Options >Advanced tab.

If you have all your updates, I found this, thanks for filling in your system specs I see you also use ESET:

I also have it and it (windows consumer preview) and it appears to be a port permissions problem with a malware app firewall (ESET)

Source, sixth post down: https://Frequent Event ID 36888 Windows Schannel errors in the Event Viewer | social.technet.microsoft.com/Forums

Later on in this thread someone mentions turning off TLS1, Talk has subsided about the black hats hacking TLS1, and I haven't heard anything in awhile.