After installing Windows 7 Pro on my Dell Lattitude laptop, i receive the following error in System Event Log:Source: SchannelEvent ID: 36888Level: errorUser:SYSTEMTask Category: nonehave you come across the message?thanks robRob Davis

After installing Windows 7 Pro on my Dell Lattitude laptop, i receive the following error in System Event Log:Source: SchannelEvent ID: 36888Level: errorUser:SYSTEMTask Category: nonehave you come across the message?thanks rob Rob Davis Is this coming up when you go on certain websites? It looks like this is an error with IE8, try going on to whatever websites you went on with IE and see if these error's are generated, then try the same websites in Firefox. This is to see if it's an server (web) issue or not. See here: http://www.sevenforums.com/drivers/8900-event-id-36874-a.html -Ken | http://ken.wagnerfamily.co.uk

Rob, did you get anywhere on this message? I'm seeing it too on my Dell XPS PC Windows 7 Ultimate. Mine started after a Windows Update. I had to do a system restore to before the update and I'm still seeing the error. I have other issues too though. I don't use even use IE, so I don't think its any websites I go to. although IE is used under the covers sometimes. Wendy

I'm getting the same on a new hp laptop with windows 7 ultimate. Fatal error 10 - what is it within schannel and what do I change to eliminate it. It's not a server issue. I'm an internet publisher and I can't even access my own site, except by my xp and mac machines. Whether firefox or explorer, the problem remains. My settings are ssl 3.0 and tls 1.0. Any advice or insight is appreciated. Thanks, Paul

Update,After more investigation, it appears that the ssl/tls schannel issue might be related to port permisisons through the firewall. I adjusted the permitted internet ports to correspond both to a list of ports believed to be associated with schannel as well asclosre matching with thepublishing ports on my servers. I'll give this a run and see whether system behavior improves. I am so shocked over by the chronic bsods that I just made the leap in judgement that it was another software problem. Up-to-now, bsod frequency diminished after flushing the residuals left by the embedded trial copy of Norton, updated the drivers for the intel (wlan) and realtek (ethernet) communications adapters and disabled the ethernet adapter (there still seems to be a contention after various experimentsnoting the behaviors, but the wlan is working wonderfully after this change), expanded page file to 107% of on-board memory (there still may be an underlying problem with the page file that diminishes when Imandate sucha large initial page file), etc, etc. So naturally I was in the frame of mind to fault the software. I would be embarassed and apologeticif its just a detail I overlooked in setting up zonealarm.Peace,Paul

Paul,I too am having this issue buton a Windows Server 2008 R2. I have my firewall disabled and Symantec (Norton) Endpoint Protection installed. I am thinking it is something to do with Symantec products. I will be calling them shortly to address this and another issue with Symantec and will update as I find more info...Log Name: SystemSource: SchannelDate: 11/24/2009 8:31:29 AMEvent ID: 36888Task Category: NoneLevel: ErrorKeywords: User: SYSTEMComputer: IVSTS1.ivs.localDescription:The following fatal alert was generated: 10. The internal error state is 10.Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" /> <EventID>36888</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2009-11-24T13:31:29.325877900Z" /> <EventRecordID>7972</EventRecordID> <Correlation /> <Execution ProcessID="528" ThreadID="3784" /> <Channel>System</Channel> <Computer>IVSTS1.ivs.local</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="AlertDesc">10</Data> <Data Name="ErrorState">10</Data> </EventData></Event>

My problem went away (along with several others) when I un-did the TakeOwnership changes I had done to various directories. Taking ownership of c:\Program Files was okay, but c:\windows BAD BAD idea!!! Even re-applying Administrator Ownership at the top level and propogating it downwards wasn't good enough. It was not that simple. Lots of side affects and fixes and false starts and fixes and side affects. ugh. I think I've got it all straight now. Have become very familiar with System Restore! My event log is now clean as a whistle! I don't have symantec.

yes and no.. ... it fixed itself..... Rob Davis

I continually see this same error - except for the hostname, date/time, and exact PIDs and Thread IDs, the XML error data above is exactly as I see it, dozens of times per day. This system has never had Symantec software on it. There is no firewall between this system and its Domain Controller (they're 12 inches apart on the same rack, connected by a simple switch). It's a simple Domain - no trust relationships, a single Domain in the Forest, no complicated secure channels to set up on the network, no downversion clients (there's a single XP SP3 workstation in the Domain, this and one other Windows 7 x64 client, and the Windows Server 2008 (32-bit, non-R2) server. I am having no visible reliability problems - no BSODs, only the usual number of app crashes, etc. I'd really appreciate any deeper analysis anyone can offer, to help understand what this error message actually means... Thanks, Jay

Also seeing Schannel errors on brand new 2008 R2 servers with Exchange. Any updates on this

I have Norton 2010 installed and I am seeing the same problems. Apps hang and system runs really slow. Browsing is a pain. Are there any other suggestions on how to fix this? Thanks, Steve

Steve, I also had serious schannel problems at the same time that other things were "off-the-rails" on a new laptop with OEM installed 64 bit Windows 7. I began to evaluate software compatibilty through the system even though it was in a failing state. Even though the software I was installing is said to be W7 compliant, the simulation of 32 bit on 64 bit required testing after observation of software performance issues. After concluding these tests, the system was abolished and a new copy was installed taking into account the observations during the problem period. One of these was to replace ZoneAlarm, which had become a suspect, with Trend Micro. When I did that my bsod (kernel crash) and schannel problems stopped. This is insufficient evidence to say that ZoneAlarm was the problem, but there is sufficient evidence to say that removing Zone Alarm from the mix replacing it with Trend Micro had a therapeutic effect. I would suggest testing the Norton product perhaps by deactivating features and if necessary removing the product (in which case W7 default protections should kick in). I learned to invoke explicit administrator priviledges when installing programs (run as administrator). At the same time I was resolving driver clash between the ethernet and wifi adapters as well as a funky problem with the NVidia all of which were contributing to system instabilities. I hope this helps.

FYI all, I am having the same problem and have linked it with a MailStreet account - exchange server located somewhere else via internet. I can start Outlook which has this MailStreet account (for the company I work for) and my POP3 account. At that time, I will get a Schannel error. I also get an Schannel error there after approximately each hour. Close Outlook and all the Schannel errors go away. I have contacted MailStreet and they say its an IE and TLS problem - I don't agree. I have messed with TLS and it doesn't help. I can removed the MailStreet email account and it all goes away. Don't know how to fix it but thought this might help.

Source: Schannel ( Hi guys im get this error in my Event logs ) Help on know what error is and is it safe and is they an fix out for it thx ============== Event ID: 36888 The following fatal alert was generated: 10. The internal error state is 10 ________________________ Event ID: 36888 The following fatal alert was generated: 70. The internal error state is 105

I am getting this error while i play Battlefield Bad Company 2. it crashes the game and returns me to the desktop. anyone have any ideas why? Log Name: System Source: Schannel Date: 7/14/2010 1:24:27 PM Event ID: 36888 Task Category: None Level: Error Keywords: User: SYSTEM Computer: ------------------ Description: The following fatal alert was generated: 10. The internal error state is 10. Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" /> <EventID>36888</EventID> <Version>0</Version> <Level>2</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2010-07-14T20:24:27.917317100Z" /> <EventRecordID>78716</EventRecordID> <Correlation /> <Execution ProcessID="596" ThreadID="1080" /> <Channel>System</Channel> <Computer>DANGYOUFAST</Computer> <Security UserID="S-1-5-18" /> </System> <EventData> <Data Name="AlertDesc">10</Data> <Data Name="ErrorState">10</Data> </EventData> </Event>

Yes i have the same problem with bad company 2 and this error in Schannel 36888 : I think i will be back to XP.. so much troubles with the new win7, and as bonus i have this one http://social.technet.microsoft.com/Forums/en/w7itproperf/thread/a611d79d-9865-4a8e-917b-74b0a891912f XP =no problems at all, win7 = blue shiny screens and kick out of the game

I am also getting the exact same problem whilst playing Battlefield bad co 2..... Well odd as it has only just started to do it after months of playing the game. It may be linked to a windows update which my Windows 7 x64 i7 pc didn't like as it kept rebooting on startup after the update was installed. Booting in safe mode fortunately got my out of jail and i was able to then boot in normal mode fine but the update was automatically removed........ something odd there! I also had the same 2nd issue as you acidifilus. Random reboots whilst browsing the net, and doing menial tasks. After interigating my crashdump file it was erroring on USB.PORT.SYS. After further tests it appeared it was the LCD screen on my Logitech G15 keyboard that was casuing it!! Swapped the keyboard out and not seen the error again.... I have spoken to other people who have been having USB issues with windows 7 x64. Keyboards dying etc. I am increasingly doubting the reliability of Windows 7 to be honest.

This problem has the signs of a Denial of service attack. Two machines here with Https are getting these errors, they are matched with Forward audits on 443 from my firewall and the event log errors On at least one occasion the web server has HUNG (virtual) and required hammer reset. I have removed HTTPs bindings wherever possible and tightened the firewall the progenitor of the attack is 213.71.31.241 10:49:05 External green TCP 213.71.31.241 4454 192.168.0.192 443(HTTPS) 10:49:06 External green TCP 213.71.31.241 2485 192.168.0.203 443(HTTPS) 11:15:53 External green TCP 213.71.31.241 1303 192.168.0.203 443(HTTPS) 11:15:53 External green TCP 213.71.31.241 1310 192.168.0.176 443(HTTPS) 11:15:53 External green TCP 213.71.31.241 1341 192.168.0.192 443(HTTPS) 11:30:20 External green TCP 213.71.31.241 4124 192.168.0.203 443(HTTPS) each of these is matched with an eventlog Schannel 36888 10/1203 entry on the end server. here is 192.168.0.192. Log Name: System Source: Schannel Date: 17/08/2010 11:15:54 AM Event ID: 36888 Task Category: None Level: Error Keywords: User: SYSTEM Computer: zzzzzzzzzzzzzzzzzzzzzzzzzzz Description: The following fatal alert was generated: 10. The internal error state is 1203. there is no log entry in the IIS log for the site.... I am certain that as one of the machines HUNG at 11:30 ish yesterday and these errors are the last thing in the log before re-start that something is cooking on an exploit. JimboJimbo

I have had this schannel error (Event ID 36888) for a couple of months, which is occurring every time I start up my computer, and it crashes Windows Explorer; I have to restart it each time, which presents no problem at that point. I will frequently go for several days without rebooting, and I have also been in the process of moving my home, so this is the first time I have had the time to look into it. It doesn't appear that any of the previous discussion on this thread fits my problem, so I thought I would see if anyone has any other ideas. Unfortunately, I do not remember what I did the day these events starting showing up, and as far as I know, there is no way to see what software I might have installed on that date. There have been no hardware changes on or about that date. Here is my basic system info: Win7 x64 8GB RAM (Crucial Corsair DDR2) Intel Core2 Duo E8400 @ 3GHz ATI Radeon HD 5800 Series Intel DG33FB Mobo Any help would be appreciated. Stuart

Steve, I also had serious schannel problems at the same time that other things were "off-the-rails" on a new laptop with OEM installed 64 bit Windows 7. I began to evaluate software compatibilty through the system even though it was in a failing state. Even though the software I was installing is said to be W7 compliant, the simulation of 32 bit on 64 bit required testing after observation of software performance issues. After concluding these tests, the system was abolished and a new copy was installed taking into account the observations during the problem period. One of these was to replace ZoneAlarm, which had become a suspect, with Trend Micro. When I did that my bsod (kernel crash) and schannel problems stopped. This is insufficient evidence to say that ZoneAlarm was the problem, but there is sufficient evidence to say that removing Zone Alarm from the mix replacing it with Trend Micro had a therapeutic effect. I would suggest testing the Norton product perhaps by deactivating features and if necessary removing the product (in which case W7 default protections should kick in). I learned to invoke explicit administrator priviledges when installing programs (run as administrator). At the same time I was resolving driver clash between the ethernet and wifi adapters as well as a funky problem with the NVidia all of which were contributing to system instabilities. I hope this helps. Paul, really, this is not a resolved problem. Unmark your comment as an answer, please! vjj

I have the same problem on BOTH an HP dx2300 desktop Win 7-32 and a Dell Studio 15 laptop Win7-64. "The following fatal alert was generated: 10. The internal error state is 10." Agree it is not resolved and that none of the above suggestions applies to me (not running Symantec or using Broadcom adaptors). On both machines the SChannel errors generate in volume when I fire up Outlook 2007, and also with other applications like Foxit PDF reader. Dell has even replaced the Motherboard on the laptop to no effect. The OS has been clean-reinstalled from scratch to no effect. Dell refuses to do anything more, saying OS issues are not covered by its extended warranty. Come on, Microsoft, we need an investigation and a fix for this issue. It is generating literally thousands of Event Log errors and must be addressed. I am having to advise my Clients not to move to Win 7 until this issue is resolved. Andrew.

I am having problems too and the only errors in the event logs are schannel 36888: "The following fatal alert was generated: 10. The internal error state is 10." I'm running Windows Server 2008 R2 Enterprise with Hyper-V. I have an ASUS Maximus III Gene motherboard, onboard Broadcom NIC onboard Creative X-Fi Soundcard. Without warning, or event view errors, my OS just freezes, and the only solution is to manually power off the machine causing my RAID 10 to rebuild every time on boot up. It's an unbelievable pain in the *ss. The manual power offs also have corrupt my data drives... If I'm playing music, I sometimes get a scratched CD effect looping, then the OS freeze. I initially thought it was the Creative Soundcard, and a lot of posts on the web mention Broadcom NIC drivers, but the only consistent thing I can link to this issue is Win 7 x64/Win 2008 x64 I've tried disabling TLS in Firefox and and IE8, but can confirm that that doesn't work - and yes I know... it was extremely unlikely to be the solution. I have uninstalled the Creative software and disabled my soundcard and rebooted. I will report back if I have any progress on this workaround.

Well after further investigation, my Win 2008 Enterprise Hyper-V host server would hang when I powered on the hosted VMs. The schannel error events look to have been a red herring. I'm running McAfee Enterprise 8.7i Patch 3 on this server. After adding On-Access Scanning exclusions to the Hyper-V app folders, VHD folders, etc, I was once more able to power on my VMs without issue.

I have the following error in my event logs and there are quite a few of them. The following fatal alert was generated: 10. The internal error state is 10. Whenever Microsoft Silverlight runs Internet Explorer hangs I previously posted this question and the referenced Microsoft information indicated that it was a security issue but that it was nothing to worry about. However having so many fatal alerts I feel maybe dragging down my system. I'm experiencing Internet Explorer hanging on a regular basis and trying to determine what may be causing a problem. I understand that I'm able to modify the registry in order to make as Schannel less chatty I would preferred understand why these fatal alerts are being generated. and what I can do to resolve the underlying problem I'm running Windows 7 ultimate 64-bit and Norton Internet security as well as malware bites. Thanks, Steve SteveUwashere.

i have been receiving similar schannel errors. the fatal alert generated on my machine is "47" instead of "10", but, everything else is the same. i read somewhere that the schannel errors are generated due to problems with certain websites certificates. i created a task to run every time the error was encountered (a system message) so that i could determine the site. i have successfully determined which website is generating the error. now all i have to do is figure out how to configure windows to accept the certificate. hope this helps.

Hi Mareshah, That's very interesting! Could you list any of the specific websites which you've found to cause the problem? That could allow us to analyse what's strange about those sites/ their certificates, in hopes of better mapping our own browsing or other network accesses to the times when the Schannel errors arise, to see if what you found could also explain what we're experiencing. Thanks, Jay

Hello, This is a simple error of Internet Explorer settings. It is very difficult to eleminate. To avoid this problem do these following steps: 1) Start >> Control Panel >> Network and Internet >> Internet Options 2) In the Advanced Tab, uncheck all options that use SSL and TLS connections 3) Click OK button 4) Restart your browser and computer 5) Warning: Disable SSL and TLS connection will disable access to email websites that use this type of connection for example: mail.google.com. You will not be able to connect to these websites. Details on Schannel topics can be found here: http://msdn.microsoft.com/en-us/library/ms678421(v=vs.85).aspx

@ Escherichia Coli, I am having the same issues with certs, but Im wondering if you have had any adverse effects of turning off SSL\TLS settings besides connecting to email, such as Gmail. I am running a secure gateway server within a DMZ zone, and turning this off might prevent remote users from connecting to the Citrix|Quest workspaces *externally* that has been created. Another question, did you see any system performance increase or decrease when disabling these features? I have had to manually restart some services, and a total website black-out has occurred until I was able to reset some services, and reboot the system at times. Any recommendations would help. Regards, Oz

Hi JQ_83, Generally when you disable SSL and TLS connections the system perfomance does not change. I disabled my TLS connections but I keep SSL (both 2.0 and 3.0) working. The Schannel Error disappeared. If you have remote connections be sure that two services: Remote Procedure Call (RPC) and Remote Procedure Call (RPC) locator work properly. Hope this helps :P

I have a similar problem: see: http://social.technet.microsoft.com/Forums/de-DE/w7itprogeneral/thread/86a70397-a35f-4548-9390-64802e1cc8ecassist others - and you can hope of help at self