BESR 2010 causing CAPI2 errors every backup

Question

Hi,

Can someone please tell me why after a clean install BESR 2010 (9.0.1.36.527) onto Windows Server 2008 R2 produces the following CAPI2 errors at the start of every backup? I know it's BESR as the event log states the process involved is "Spsprebkup.exe":

Log Name:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Microsoft-Windows-CAPI2/Operational
		Source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Microsoft-Windows-CAPI2
		Date:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 14/07/2010 15:12:55
		Event ID:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 11
		Task Category: Build Chain
		Level:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Error
		Keywords:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Path Discovery,Path Validation
		User:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SYSTEM
		Computer:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HOMER.myserver.com
		Description:
		For more details for this event, please refer to the "Details" section
		Event Xml:
		&lt;Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"&gt;
		&nbsp; &lt;System&gt;
		&nbsp;&nbsp;&nbsp; &lt;Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" /&gt;
		&nbsp;&nbsp;&nbsp; &lt;EventID&gt;11&lt;/EventID&gt;
		&nbsp;&nbsp;&nbsp; &lt;Version&gt;0&lt;/Version&gt;
		&nbsp;&nbsp;&nbsp; &lt;Level&gt;2&lt;/Level&gt;
		&nbsp;&nbsp;&nbsp; &lt;Task&gt;11&lt;/Task&gt;
		&nbsp;&nbsp;&nbsp; &lt;Opcode&gt;2&lt;/Opcode&gt;
		&nbsp;&nbsp;&nbsp; &lt;Keywords&gt;0x4000000000000003&lt;/Keywords&gt;
		&nbsp;&nbsp;&nbsp; &lt;TimeCreated SystemTime="2010-07-14T13:12:55.670849800Z" /&gt;
		&nbsp;&nbsp;&nbsp; &lt;EventRecordID&gt;18&lt;/EventRecordID&gt;
		&nbsp;&nbsp;&nbsp; &lt;Correlation /&gt;
		&nbsp;&nbsp;&nbsp; &lt;Execution ProcessID="3600" ThreadID="1856" /&gt;
		&nbsp;&nbsp;&nbsp; &lt;Channel&gt;Microsoft-Windows-CAPI2/Operational&lt;/Channel&gt;
		&nbsp;&nbsp;&nbsp; &lt;Computer&gt;HOMER.myserver.com&lt;/Computer&gt;
		&nbsp;&nbsp;&nbsp; &lt;Security UserID="S-1-5-18" /&gt;
		&nbsp; &lt;/System&gt;
		&nbsp; &lt;UserData&gt;
		&nbsp;&nbsp;&nbsp; &lt;CertGetCertificateChain&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer" subjectName="Microsoft Certificate Trust List Publisher" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;AdditionalStore&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="375FCB825C3DC3752A02E34EB70993B4997191EF.cer" subjectName="Microsoft Time-Stamp PCA" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer" subjectName="Microsoft Certificate Trust List PCA" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="CDD4EEAE6000AC7F40C3802C171E30148030C072.cer" subjectName="Microsoft Root Certificate Authority" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer" subjectName="Microsoft Certificate Trust List Publisher" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="80B9915817340CEE66D71EC27DA5F96EBF8D94D8.cer" subjectName="Microsoft Time-Stamp Service" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/AdditionalStore&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ExtendedKeyUsage&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Usage oid="1.3.6.1.4.1.311.10.3.9" name="Root List Signer" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/ExtendedKeyUsage&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Flags value="100" CERT_CHAIN_DISABLE_AUTH_ROOT_AUTO_UPDATE="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ChainEngineInfo context="user" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;CertificateChain chainRef="{CD1BEC21-F2BD-4914-ADD7-4A33AC93ABF0}"&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ErrorStatus value="1" CERT_TRUST_IS_NOT_TIME_VALID="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;InfoStatus value="100" CERT_TRUST_HAS_PREFERRED_ISSUER="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ChainElement&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer" subjectName="Microsoft Certificate Trust List Publisher" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ErrorStatus value="1" CERT_TRUST_IS_NOT_TIME_VALID="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ApplicationUsage&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Usage oid="1.3.6.1.4.1.311.10.3.9" name="Root List Signer" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/ApplicationUsage&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;IssuanceUsage /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/ChainElement&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ChainElement&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="F77A3F82B7C4B3A9D869A93E3335CF1F78BC441E.cer" subjectName="Microsoft Certificate Trust List PCA" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ErrorStatus value="0" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ApplicationUsage&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Usage oid="1.3.6.1.4.1.311.10.3.1" name="Microsoft Trust List Signing" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Usage oid="1.3.6.1.4.1.311.10.3.9" name="Root List Signer" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/ApplicationUsage&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;IssuanceUsage /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/ChainElement&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ChainElement&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="CDD4EEAE6000AC7F40C3802C171E30148030C072.cer" subjectName="Microsoft Root Certificate Authority" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="4096" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ErrorStatus value="0" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;InfoStatus value="10C" CERT_TRUST_HAS_NAME_MATCH_ISSUER="true" CERT_TRUST_IS_SELF_SIGNED="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/TrustStatus&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;ApplicationUsage any="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;IssuanceUsage any="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/ChainElement&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;/CertificateChain&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;EventAuxInfo ProcessName="Spsprebkup.exe" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;CorrelationAuxInfo TaskId="{A7E8846B-C222-468A-ACF6-27AAD994D867}" SeqNumber="18" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Result value="800B0101"&gt;A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.&lt;/Result&gt;
		&nbsp;&nbsp;&nbsp; &lt;/CertGetCertificateChain&gt;
		&nbsp; &lt;/UserData&gt;
		&lt;/Event&gt;
	
		Log Name:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Microsoft-Windows-CAPI2/Operational
		Source:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Microsoft-Windows-CAPI2
		Date:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 14/07/2010 15:12:55
		Event ID:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 30
		Task Category: Verify Chain Policy
		Level:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Error
		Keywords:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Path Validation
		User:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; SYSTEM
		Computer:&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HOMER.myserver.com
		Description:
		For more details for this event, please refer to the "Details" section
		Event Xml:
		&lt;Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"&gt;
		&nbsp; &lt;System&gt;
		&nbsp;&nbsp;&nbsp; &lt;Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" /&gt;
		&nbsp;&nbsp;&nbsp; &lt;EventID&gt;30&lt;/EventID&gt;
		&nbsp;&nbsp;&nbsp; &lt;Version&gt;0&lt;/Version&gt;
		&nbsp;&nbsp;&nbsp; &lt;Level&gt;2&lt;/Level&gt;
		&nbsp;&nbsp;&nbsp; &lt;Task&gt;30&lt;/Task&gt;
		&nbsp;&nbsp;&nbsp; &lt;Opcode&gt;0&lt;/Opcode&gt;
		&nbsp;&nbsp;&nbsp; &lt;Keywords&gt;0x4000000000000001&lt;/Keywords&gt;
		&nbsp;&nbsp;&nbsp; &lt;TimeCreated SystemTime="2010-07-14T13:12:55.671849800Z" /&gt;
		&nbsp;&nbsp;&nbsp; &lt;EventRecordID&gt;19&lt;/EventRecordID&gt;
		&nbsp;&nbsp;&nbsp; &lt;Correlation /&gt;
		&nbsp;&nbsp;&nbsp; &lt;Execution ProcessID="3600" ThreadID="1856" /&gt;
		&nbsp;&nbsp;&nbsp; &lt;Channel&gt;Microsoft-Windows-CAPI2/Operational&lt;/Channel&gt;
		&nbsp;&nbsp;&nbsp; &lt;Computer&gt;HOMER.myserver.com&lt;/Computer&gt;
		&nbsp;&nbsp;&nbsp; &lt;Security UserID="S-1-5-18" /&gt;
		&nbsp; &lt;/System&gt;
		&nbsp; &lt;UserData&gt;
		&nbsp;&nbsp;&nbsp; &lt;CertVerifyCertificateChainPolicy&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Policy type="CERT_CHAIN_POLICY_BASE" constant="1" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Certificate fileRef="51C731109CF66DD3F9C55D28A95D9E4DEA12FE97.cer" subjectName="Microsoft Certificate Trust List Publisher" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;CertificateChain chainRef="{CD1BEC21-F2BD-4914-ADD7-4A33AC93ABF0}" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Flags value="14" CERT_CHAIN_POLICY_IGNORE_NOT_TIME_NESTED_FLAG="true" CERT_CHAIN_POLICY_ALLOW_UNKNOWN_CA_FLAG="true" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Status chainIndex="0" elementIndex="0" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;EventAuxInfo ProcessName="Spsprebkup.exe" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;CorrelationAuxInfo TaskId="{A7E8846B-C222-468A-ACF6-27AAD994D867}" SeqNumber="19" /&gt;
		&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &lt;Result value="800B0101"&gt;A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.&lt;/Result&gt;
		&nbsp;&nbsp;&nbsp; &lt;/CertVerifyCertificateChainPolicy&gt;
		&nbsp; &lt;/UserData&gt;
		&lt;/Event&gt;

It also happens on Windows 7 system running just the agent,

Cheers,
	Fernando

phill_brown · Answer

I am also having the same issue. I have a exchange server getting these errors when I run my backup jobs on another server - within one minute of the job start time.

I've installed the certificates it is requesting and still the errors at the start of every backup.

Forum Discussion

BESR 2010 causing CAPI2 errors every backup

Related Content

NDMP Backup Failed (media close error (87))

NBU error 58

SQL Backup error

Manual tap ejection cause Error alert

backup error 227

Recent Discussions

System Recovery 23 does not install on windows 23H2

All I want to do is buy a licence (PART TWO!)

Problems Installa Testversion System Recovery

What is Varitas

Issue with Veritas System Recovery 22 and Windows Server, see my Description