I have a CAPI2 issue with consent.exe. and its time stamp on both pc.

[savannahmick]

Hi I have had a consentexe. issue for awhile now and I noticed its on both computers and both are less than 6 months old. Anyway is there a way to replace/repair a timestamp in a certain program like consentexe.? I know this is a user account program that is part of win7 64 bit but what exactly does it do and could it cause my issue with not having priviledges to use large page files (Tip from Si Sandra Memory Benchmark) and I have other access issues I think that now I have two user accounts instead of one because I am now listed as standard issue with admin. priviledges but before I was only the administrator. This error in the CAPI2 log happens a boot and about once a hour after boot. Can anyone help my out with this THANKS?Log Name: Microsoft-Windows-CAPI2/Operational
Source: Microsoft-Windows-CAPI2
Date: 9/18/2010 7:46:54 PM
Event ID: 11
Task Category: Build Chain
Level: Error
Keywords: Path Discovery,Path Validation
User: SavannahMick-PC\SavannahMick
Computer: SavannahMick-PC
Description:
For more details for this event, please refer to the "Details" section
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" />
<EventID>11</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>11</Task>
<Opcode>2</Opcode>
<Keywords>0x4000000000000003</Keywords>
<TimeCreated SystemTime="2010-09-18T23:46:54.486731300Z" />
<EventRecordID>23524</EventRecordID>
<Correlation />
<Execution ProcessID="2580" ThreadID="2736" />
<Channel>Microsoft-Windows-CAPI2/Operational</Channel>
<Computer>SavannahMick-PC</Computer>
<Security UserID="S-1-5-21-163695203-2985681545-29013369-1001" />
</System>
<UserData>
<CertGetCertificateChain>
<Certificate fileRef="80B9915817340CEE66D71EC27DA5F96EBF8D94D8.cer" subjectName="Microsoft Time-Stamp Service" />
<ValidationTime>2009-07-14T02:50:48Z</ValidationTime>
<AdditionalStore>
<Certificate fileRef="5DF0D7571B0780783960C68B78571FFD7EDAF021.cer" subjectName="Microsoft Windows Verification PCA" />
<Certificate fileRef="375FCB825C3DC3752A02E34EB70993B4997191EF.cer" subjectName="Microsoft Time-Stamp PCA" />
<Certificate fileRef="018B222E21FBB2952304D04D1D87F736ED46DEA4.cer" subjectName="Microsoft Windows" />
<Certificate fileRef="80B9915817340CEE66D71EC27DA5F96EBF8D94D8.cer" subjectName="Microsoft Time-Stamp Service" />
</AdditionalStore>
<ExtendedKeyUsage>
<Usage oid="1.3.6.1.5.5.7.3.8" name="Time Stamping" />
</ExtendedKeyUsage>
<Flags value="C8000005" CERT_CHAIN_CACHE_END_CERT="true" CERT_CHAIN_CACHE_ONLY_URL_RETRIEVAL="true" CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT="true" CERT_CHAIN_REVOCATION_CHECK_CACHE_ONLY="true" CERT_CHAIN_REVOCATION_ACCUMULATIVE_TIMEOUT="true" />
<ChainEngineInfo context="user" />
<CertificateChain chainRef="{FFC151D2-27D1-41B7-AFEC-E4161BFFE6BB}">
<TrustStatus>
<ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
<InfoStatus value="100" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ChainElement>
<Certificate fileRef="80B9915817340CEE66D71EC27DA5F96EBF8D94D8.cer" subjectName="Microsoft Time-Stamp Service" />
<SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
<PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
<TrustStatus>
<ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
<InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ApplicationUsage>
<Usage oid="1.3.6.1.5.5.7.3.8" name="Time Stamping" />
</ApplicationUsage>
<IssuanceUsage />
<RevocationInfo>
<RevocationResult value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</RevocationResult>
</RevocationInfo>
</ChainElement>
<ChainElement>
<Certificate fileRef="375FCB825C3DC3752A02E34EB70993B4997191EF.cer" subjectName="Microsoft Time-Stamp PCA" />
<SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
<PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
<TrustStatus>
<ErrorStatus value="0" />
<InfoStatus value="101" CERT_TRUST_HAS_EXACT_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ApplicationUsage>
<Usage oid="1.3.6.1.5.5.7.3.8" name="Time Stamping" />
</ApplicationUsage>
<IssuanceUsage />
<RevocationInfo freshnessTime="P124DT0H19M11S">
<RevocationResult value="0" />
<CertificateRevocationList location="TvoCache" url="http://crl.microsoft.com/pki/crl/products/microsoftrootcert.crl" fileRef="6CC49C402F7C2A28CCF67F6DC1AFB9E5D79CDE10.crl" issuerName="Microsoft Root Certificate Authority" />
</RevocationInfo>
</ChainElement>
<ChainElement>
<Certificate fileRef="CDD4EEAE6000AC7F40C3802C171E30148030C072.cer" subjectName="Microsoft Root Certificate Authority" />
<SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
<PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="4096" />
<TrustStatus>
<ErrorStatus value="0" />
<InfoStatus value="10C" CERT_TRUST_HAS_NAME_MATCH_ISSUER="true" CERT_TRUST_IS_SELF_SIGNED="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
</TrustStatus>
<ApplicationUsage any="true" />
<IssuanceUsage any="true" />
</ChainElement>
</CertificateChain>
<EventAuxInfo ProcessName="consent.exe" impersonateToken="S-1-5-21-163695203-2985681545-29013369-1001" />
<CorrelationAuxInfo TaskId="{D669B361-1D62-4626-B056-7DA554F6D12F}" SeqNumber="13" />
<Result value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</Result>
</CertGetCertificateChain>
</UserData>
</Event>

 

[Flavius]

Event ID 4107 or Event ID 11 is logged in the Application log in Windows Vista, in Windows Server 2008, and in later versions of Windows and of Windows Server

 

[savannahmick]

Hey thanks for that and I'll give it a try!

 

[savannahmick]

I tried to delete the data that the Microsoft fix but can't open.

Thanks for the hyperlink but for some reason I can't access my appdata on either computer and these are the computers with error 11 consentexe. in the first post its seems I'm not getting all my priviledges at boot and I can't understand why I got this issue on two totally different computers with none of the same programs besides win7 64bit. This occurred after a Window update and this error 11 started and I can't figure it out for nothing and I also had the 4107 error but it went away.Will restore to factory fix a certificate issue or will these remain I wish I could fix.THANKS for any help!