Multiple reoccurring 36887 schannel errors.

[pb88]

There has been a reoccurring error showing up in the event viewer. I get the following error, "Event ID: 36887 Schannel. The following fatal alert was received: 70."

I've been doing research, and pretty much know its saying that the process is using an insecure url, but it's been updated to use a secure one and to ignore. However, at the frequency it's happening, it's starting to get a bit annoying.

It's not coming from the browser. It's coming from some other process. The errors happen in intervals. Five schannel errors show up every 15 minutes.

I checked the PID in the error in the ProcessExplorer and it's labeled as "Local Security Authority Process", with three services running under that ID: Security Accounts Manager, CNG Key Isolation, and Encrypting file system.

Not sure, how to track it from there. Do you know where I should start looking?


Thanks

 

[iko22]

Event ID: 36887 Schannel is triggered by websites where the URL was upgraded to https but the locally stored link is still http.

I would start looking at the URLs stored in your browser bookmarks.

 

[pb88]

I dont think its the bookmarks. The time stamps of these errors in the event viewer are times that I'm not even on the browser surfing the web.

 

[iko22]

Do you have Microsoft Outlook, installed on your computer at all?

 

[pb88]

I do not have that installed. I know in one post, it said it was due to ccleaner. I've since uninstalled that. The errors still keep popping up. The errors appear instantly on startup, so it must be some app installed. I might just have to edit the system configuration, and disable all non-essential apps/services to get to the bottom of this.

 

[iko22]

If you are not browsing the Web, then you could check the Event Viewer logs before turning on your Router.

 

[iko22]

Which browser, or browsers, do you use?

If you are only using Internet Explorer, then you can troubleshoot the problem by switching off SSL/TLS support in either Internet Options or in Group Policy "Turn Off Encryption Support".

 

[iko22]

I know in one post, it said it was due to ccleaner. I've since uninstalled that. The errors still keep popping up.

The Schannel-specific registry keys are located at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL