Windows 10: Schannel Error 0x80092012

Hello. I am attempting to connect to a multiplayer game and each time I want to log in the error above happens. Their support representative told me it was a Windows problem. So I checked Event Viewer, and sure enough it's being clogged up with Schannel errors when I try to connect. The details state that "The certificate received from the remote server has not validated correctly. The error code is 0x80092012. The TLS connection request has failed. The attached data contains the server certificate."


How do I fix this?


Thank you.

:)

 

Schannel Error 0x80092012

Hello. I am attempting to connect to a multiplayer game and each time I want to log in the error above happens. Their support representative told me it was a Windows problem. So I checked Event Viewer, and sure enough it's being clogged up with Schannel
errors when I try to connect. The details state that "The certificate received from the remote server has not validated correctly. The error code is 0x80092012. The TLS connection request has failed. The attached data contains the server certificate."

How do I fix this?

Thank you.

 

Schannel, error 36887

My screen goes blank for 2 to 3 seconds and when I check the event viewer, I see an Schannel error and the event ID number is 36887. I am running Windows 10. The blank screen phenomenon is a random event and does not seem to cause any other difficulty.
Any thoughts as to what is causing this problem. Thanks.

 

SCHANNEL ERRORS FIX

Have you ever seen that jet.com commercial....you know the one where there heads explode into purple smoke

that's what my head just did...poof

after many days of research and a lot of trial and error...

here is what I have found to be the best fix for this schannel errors... day 2 no errors so far so good

try this after you read the full post at your own risk

this is the short version read on for full how to

go to Administrative tool.

Open component services.

Click Computer, click my computer, then click DCOM.

Look for the corresponding service that appears on the error viewer.

Note: "Immersive Shell"

Right click on it then click properties.

Click security tab then click Customize in the Launch and Activation permissions section. Click Edit. Click Add. Add Local Service. Then apply.

Tick the Local Activation box.

To fix the DCOM error, I had to add Local Service not System with activation permissions.

In Group Policy Editor (run: gpedit.msc), went to Computer Configuration > Administrative Templates > System > Distributed COM > Application Compatibility and enabled "allow local activation security check exemptions"

first all the web site I went to please read thru all for full understanding of how this works:

https://social.technet.microsoft.co...dcom-error-in-event-viewer?forum=w81previtpro

https://social.technet.microsoft.co...event-source-schannel-1010?forum=winservergen

https://social.technet.microsoft.co...rce-schannel?forum=windowsserver2008r2general

http://answers.microsoft.com/en-us/...a/18f4529e-f60b-4e04-96da-486ab8226588?auth=1

https://social.technet.microsoft.co...8-windows-schannel-errors-in-the-event-viewer

http://answers.microsoft.com/en-us/...n/e4630db3-50c2-4cc5-9813-f089494a1145?auth=1

https://msdn.microsoft.com/en-us/library/aa922895.aspx

http://stackoverflow.com/questions/...er-properties-in-an-asp-net-mvc-4-application

https://teckadmin.wordpress.com/2012/07/14/disable-weak-secure-channel-protocols/

https://support.microsoft.com/en-us/kb/245030

https://msdn.microsoft.com/en-us/library/windows/desktop/aa379810(v=vs.85).aspx

these websites was the best at finding the problem:

http://blog.ittoby.com/2014/07/why-schannel-eventid-36888-36874-occurs.html

https://www.wireshark.org/#download

https://wiki.wireshark.org/CaptureFilters

go here to test your site:

https://www.ssllabs.com/index.html

now then here we go:

check event viewer for schannel error

open in xml view

open regedit

open systeminternal process explorer

example event viewer what to look for:

The machine-default permission settings do not grant Local Activation permission for the COM Server application with CLSID

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

and APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

to the user ltpe11\Andrei SID (S-1-5-21-3155224360-2102936565-2359982101-1001) from address LocalHost (Using LRPC) running in the application container Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe SID (S-1-15-2-2040986369-264322980-3882385089-1970153872-3662121739-3363227934-2464603330).
This security permission can be modified using the Component Services administrative tool.

CLSID

{C2F03A33-21F5-47FA-B4BB-156362A2F239}

APPID

{316CDED5-E4AE-4B15-9113-7055D84DCC97}

scan in regedit for clsid and appid

<Execution ProcessID="712" ThreadID="8936" /> for use in process explorer

<Data Name="param1">machine-default</Data>

<Data Name="param2">Local</Data>

<Data Name="param3">Activation</Data>

<Data Name="param4">{C2F03A33-21F5-47FA-B4BB-156362A2F239}</Data>

<Data Name="param5">{316CDED5-E4AE-4B15-9113-7055D84DCC97}</Data>

<Data Name="param8">S-1-5-21-3155224360-2102936565-2359982101-1001</Data>

<Data Name="param9">LocalHost (Using LRPC)</Data>

<Data Name="param10">Microsoft.BingWeather_3.0.1.174_x64__8wekyb3d8bbwe</Data>

<Data Name="param11">S-1-15-2-2040986369-264322980-3882385089-1970153872-3662121739-

note param 4 and 5 clsid and appid

on search of reg key you will find (Default) REG_SZ Immersive Shell

process explorer show lsass as thread

all this lead to lsass

and that leads to certificate which without proper cert no hello

run trace with wire shark (set to decode as ssl) and you will find what is causeing the ssl handshake hello fail

in my case it was amazon firestick...amazon_TE

but I could not find a cert on it to reinstall

after checking all thru my comp for cert

by doing the above and reading all the websites listed I have found that I still get schannel showing info of all the request for security cert ssl which I find much better knowing what is talking to my comp on ssl now but no errors

full steps:

open event viewer find error

open process ex to find process and thread

run wireshark >capture >right click on (handshakefail "hello") you'll know it when you see it if not google is your friend> set to decode as ssl when you find

1. Open Regedit.

2. Go to HKEY_Classes_Root\CLSID\*CLSID*.

Note: *CLSID* stand for the ID that appears in your event viewer error. In your case, it's {C2F03A33-21F5-47FA-B4BB-156362A2F239}.

3. Right click on it then select permission.

4. Click Advance and change the owner to Administrators. Also click the box that will appear below the owner line.

5. Apply full control.

6. Close the tab then go to HKEY_LocalMachine\Software\Classes\AppID\*APPID*.

Note: *AppID* is the ID that appears in your event viewer. In your case it's {316CDED5-E4AE-4B15-9113-7055D84DCC97}.

7. Right click on it then select permission.

8. Click Advance and change the owner to Administrators.

9. Click the box that will appear below the owner line.

10. Click Apply and grant full control to Administrators.

11. Close all tabs and go to Administrative tool.

12. Open component services.

13. Click Computer, click my computer, then click DCOM.

14. Look for the corresponding service that appears on the error viewer.

Note: For this step, look for the one that appeared at the right panel of the RegEdit. For example, the AppID Registry (316CDED5-E4AE-4B15-9113-7055D84DCC97) contains the "Immersive Shell" Data with a (Default) as a name. Now look for "Immersive Shell".

15. Right click on it then click properties.

16. Click security tab then click Customize in the Launch and Activation permissions section. Click Edit. Click Add. Add
Local Service. Then apply.

17. Tick the Local Activation box.

Line 4 you had the user Administrator added, not the group Administrators. After making this change my hang on shutdown was fixed. To fix the DCOM error, I had to add Local Service not System with activation permissions.

poof...(insert purple smoke here)

next up ...add menu bar to MS edge...so far no luck....my head hurts....poof