registration of certificate is missing

Similar Questions

• Registration of certificate

  Someone would be kind enough to clarify a minor point for me. If I have an ASA with a domain FULL of asa1.mycompany.com and I wish to terminate Anyconnect sessions top pointing to the sslvpn.mycompany.com DNS entry. During the generation of my identity Cert, made the field CN = domain FULL of the ASA or the VPN name, etc. I want to just make sure I generate certificate request correctly before sending to the Slighly CA. not sure if that makes a difference. Regards Darren

  If you find this useful rate please, thank you! :)

• After the upgrade to 36.0.1 I miss my certificates

  I've updated to 36.0.1 and now all my certificates are missing. Where can I import coming from?

  Well, you'll want to open your old profile folder and your.

  Old profile folder: Inside the old data of Firefox, you should find at least one folder named randomly semi. In general, there is a dot in the Middle, followed by the default value of word, but it could be something else. Double-click on in this folder and look for cert8.db. (If there is more than one profile folder, find the most recently updated cert8.db.)

  Current profile folder: The best way to get at this is in Firefox. Either:

  • button "3-bar" menu > "?" button > troubleshooting information
  • (menu bar) Help > troubleshooting information
  • type or paste everything: in the address bar and press Enter

  In the first table of the page, click on the view file"" button. This will launch your current profile folder in a new Windows Explorer window.

  Leave this window open, switch back to Firefox and output, either:

  • "3-bar" menu button > button "power".
  • (menu bar) File > Exit

  Pause while Firefox ends its cleaning and then rename the current cert8.db as cert8.old.

  Copy to: You can now copy the old cert8.db in current profile folder, either by dragging them from one window to another, or right-click > copy on the old file and right click > paste into an empty space in the current folder.

  When you start Firefox back up again, it must use your old certificates.

  Success?

• Missing certificate - Microsoft Windows XP Service Pack 3

  Hello

  I just try to install Nokia following my operating system above Windows version of the title, but it shows following message:

  Missing intermediate certificate

  I also try to find answer with NOKIA Customer Services , but no technical assistance received by me. I hope that Microsoft technical support has an answer on how to solve this problem.

  Please answer if someone has an answer.
  Thank you

  On everything you can do by end Microsoft is to make sure that your root certificates are up to date.  If a root certificate is missing or has expired, the intermediate certificate cannot load.  To update your root certificates, go to the following article:

  "Members of the certificate program root Windows.
    <>http://support.Microsoft.com/kb/931125 >

  Go to the section:
  "Root Update Package (planned for Windows XP only)"
  Then download and run the package to update root that are there.

  Hope this helps,
  JW

• How can I update obsolete or damaged certificates?

  I have inadvertently deleted or damaged some of my web certificates. Now when I run Firefox 3.6.13, I get a pop-up saying the a specific certificate is not valid. I can't, for example, use the hand Invisible in Firefox Add-on, because the certificate is not valid. I tried deleting and reinstalling hand Invisible, but not luck.

  How can I reload a certificate invalid, missing, corrupted or obsolete?

  Thank you

  airpilot

  Rename (or delete) the file cert8.db (cert8.db.old) in the profile folder to delete all intermediate certificates that Firefox has stored by visiting secure Web sites.

  Help > troubleshooting information > profile directory: opens showing the file

• Certificate autoenrollment fails after the update of the model

  Asked me to extend the period of validity on the certificates that we issue to users to authenticate on our wireless LAN. Group Policy allows us to cause users to automatically enroll for a certificate by using a version 3 template (our issuing CA is Windows Server 2003 Enterprise Edition). Users were able to automatically enroll for certificates with no problems.

  To increase the duration of validity, I modified the model certificate as a business administrator (I also increased the renewal period), then forced all certificate holders to re-register, which changed the model on the CA to 101,0 version (previously it was 100.2).

  None of my users seem to be reenrolled for the updated certificate. The search Event Viewer on my PC, I see four 'CertificateServicesClient-CertEnroll' information events (event ID 65, 64 & 66) suggesting that I connect successfully to the issuing certification authority, followed by a source "CertificateServicesClient CertEnroll" error (event ID 13) and error (ID of the event 6) source "CertificateServicesClient-autoenrollment" (details below). This sequence is generated whenever the autoenrollment is triggered.

  Can anyone suggest what could be the problem here? Thank you very much, Damion.

  Log name: Application
  Source: Microsoft-Windows-CertificateServicesClient-CertEnroll
  Date: 18/07/2011 08:44:24
  Event ID: 13
  Task category: no
  Level: error
  Keywords: Classic
  User: domain\user
  Computer: COMPUTER.exe.nhs.uk
  Description:
  Registration certificate for user domain\username could not enroll a certificate WirelessUser with the ISSUINGCA.domain\Issuing CA 19934 request for domain ID (the request template version is newer than the version of the model of support. 0 x 80094807 (-2146875385)).

  Log name: Application
  Source: Microsoft-Windows-CertificateServicesClient-registration auto
  Date: 18/07/2011 08:44:25
  Event ID: 6
  Task category: no
  Level: error
  Keywords: Classic
  User: n/a
  Computer: COMPUTER.exe.nhs.uk
  Description:
  Automatic registration of certificate for domain\user failed (0 x 80094807) the request template version is newer version of model taken in charge.

  This problem has been resolved by a restart of the server.

• BlackBerry smartphones corrupt and Roxio Media Manager certificate

  When I originally installed the Desktop Manager, v4.2.x, and tried to use the Media Manager when it is connected to my Blackberry 8310 I received the error message "Roxio Easy Media Creator - the certificate is missing or has been corrupted.  Please reinstall it. ».  I uninstalled the Office Manager and all Roxio files, loaded to the bottom of Desktop Manager, version 4.5 and re-installed... and with the same problem.

  What is happening with this?

  It's the roxio media site users. Barnes is an individual of roxio, this regarding

  the corrupt certificate.

  In the meantime, Barnes is correct stating that your problem will be resolved to a clean install. Here are the only instructions depending on your operating system to install of the own.

  Clean for Creator 9 on XP Installation Instructions
  Clean for Creator 9 Vista installation Instructions

  In the meantime, Barnes is correct stating that your problem will be resolved to a clean install. Here are the only instructions depending on your operating system to install of the own.

  It might be interesting to try before or after you run the cleanuninstall for office.

  Your thoughts?

• Can I create an app preview of work without creating a certificate, etc.?

  All I have to do is create an app to work for a Tablet (Android - Galaxy 10.1) Preview to qualify as a presentation of the company only on this one tablet. It is an InDesign document of 80 pages with hyperlinks, interactivity, video, and I wonder if I have to go through the registration process, certificates etc all just to do this?

  Folio builder Panel, select the folio and open the Panel menu. Select properties of folio.

  Bob

• [SOLVED] Web Forms - works on IE and Chrome, firefox, said that missing the plugin

  Greetings,
  
  
  It works perfectly in IE and Chrome I opened client Gin through the same URL, ex: http://10.0.0.28:7778/forms/frmservlet? config = gin4
  
  However, if I try the same URL in firefox it shows a large gray square on the page with the message "click here to download the Plugin.
  
  Clicking on install opens a small popup saying no appropriate plugins have been found, it is said to the inside and unknown Plugin (text/html) and a button to install manually is displayed.
  By clicking this button, I am taken to this page: http://java.sun.com/products/archive/j2se/1.4.2_06/index.html
  
  I lost track on the number of times where I have installed uninstalled and reinstalled many versions of java not only the version 1.4.2_06.
  
  I tried to solve this problem for a few months now with no luck.
  
  Here is the Source code of the html page, it is the same for all browsers, since it is the same url:
  
  
  
  
  
  < HTML >
  <!-FILE: webutiljpi.htm (Oracle Forms)->
  <!-->-->
  <!-this is the HTML file default base for running a form on the - >
  <!-web site using the Plugin Java JDK. It is used for example when->
  <!-running with Netscape on Unix. ->
  <!- and -> an applet for registration of certificate for utility WebUtil
  <!-->-->
  <!-NOTICE IMPORTANT: - >
  <!--> default values for all variables that appear below
  <!--(fermé en caractères pour cent) are defined in the servlet->
  <!-configuration file (formsweb.cfg). It is better to do-->
  <!-changes in this file, if possible, rather than this one. ->
  <!-->-->
  <!-this file uses several additional tags that are not present in the - >
  <!-default template files. You must ensure that these are->
  <! - present in the configuration that uses this model - >
  <!-the extra substitution Tags are: - >
  <! - frmwebutil.jar, jacob.jar = jar file containing the code of WebUtil - >
  <!-->--(par défaut, ce doit être frmwebutil.jar)
  <!-off = sets the current journaling mode. ->
  <!-valid values: off | on | Console | Server | all->
  <!-->--(suite == console)
  <!-normal = specifies the level of logging error.-->
  <!-valid values: normal | detail->
  <!-alert = errors should be displayed in an alert-->
  <!--as well as the programmer defined - >
  <!--locations - >
  <!-valid values: console | Server | alert | all->
  <!--5 = points in second to->
  <! - indicate how often the thread - >
  <!-checks whether the session of forms is always-->
  <!-living. Used with the WebUtil_Session->
  <!-the package. ->
  <!-true = should intranet without domain-> suffix
  <!-trust. ->
  <!-valid values: true | Yes | false | No->
  <!--16384 = size in bytes of the file--> transfer
  <!-segments. By default and the maximum allowed value is->
  <!--16384, which is 16 K. ->
  < HEAD > < TITLE > GIN - Integrada Negocio - WebUtil management < / TITLE > < / HEAD >
  < BODY >
  
  < COMMENT id = "forms_plugin_info".
  plug_ver = "clsid:CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA"
  appheight = "800".
  appwidth = "900".
  AppCodeBase = "http://java.sun.com/products/plugin/autodl/jinstall-1_4_2-windows-i586.cab#Version=1, 4,2,06" >
  < / COMMENT >
  <!-definition forms (start)-> applet
  < NOSCRIPT >
  < OBJECT classid = "clsid:CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA"
  CodeBase = "http://java.sun.com/products/plugin/autodl/jinstall-1_4_2-windows-i586.cab#Version=1, 4,2,06".
  WIDTH = "900".
  HEIGHT = "800".
  HSPACE = "0".
  HSPACE = "0" >
  < / NOSCRIPT >
  < SCRIPT LANGUAGE = "JavaScript" SRC = "java/forms_ie.js" > < / SCRIPT >
  < PARAM NAME = "TYPE" VALUE="application/x-java-applet;jpi-version=1.4.2_06" >
  < PARAM NAME = "CODEBASE" VALUE = "/ forms/java" >
  < PARAM NAME = 'CODE' VALUE = "oracle.forms.engine.Main" > "
  < PARAM NAME = jacob.jar, laf.jar, formsmagnifier.jar, formsmagnifier10123.jar, handleimage3.jar, fjtable.jar, frmwebutil.jar, ginico4.jar, 'ARCHIVE' VALUE = "frmall.jar" > "
  < PARAM NAME = 'ServerURI"VALUE =" / forms/lservlet? " ifcfs = / forms/frmservlet? config = gin4 & acceptLanguage = en-US, en; q = 0.8 ">
  < PARAM NAME = "networkRetries" VALUE = "30" >
  < PARAM NAME = "serverArgs".
  VALUE = "escapeParams = true module = GINFS001.fmx userid = sso_userid = sso_formsid % 20 = % 25OID_FORMSID % 25 sso_subDN sso_usrDN = debug = no = no host = buffer_records port = no = no debug_messages = no table only = no obr = no query_only no = no = yes render peace = no trace = tracegroup = log = term=/orasoft/OraHome_1/forms/admin/resource/US/fmrpcweb.res UTI = PASS IDIOMA = ADMGIN = admgin PM$CSS_FILENAME=/gin/gin4/exe/forms.css =" >
  < PARAM NAME = "separateFrame" VALUE = "true" >
  < PARAM NAME = "splashScreen" VALUE = "no" >
  < PARAM NAME = "background" VALUE = "FUNDO.jpg" >
  < PARAM NAME = "lookAndFeel" VALUE = 'oracle' >
  < PARAM NAME = 'colorScheme' VALUE = 'blue' >
  < PARAM NAME = 'serverApp"VALUE ="default">
  < PARAM NAME = "logo" VALUE = "REMATE_MENU.gif" >
  < PARAM NAME = 'imageBase' VALUE = 'codebase' >
  < PARAM NAME = "formsMessageListener" VALUE = "" >
  < PARAM NAME = "recordFileName" VALUE = "" >
  < PARAM NAME = "EndUserMonitoringEnabled" VALUE = "" >
  < PARAM NAME = "EndUserMonitoringURL" VALUE = "" >
  < PARAM NAME = "heartBeat" VALUE = "" >
  < PARAM NAME = "WebUtilLogging" VALUE = "off" >
  < PARAM NAME = "WebUtilLoggingDetail" VALUE = 'normal' >
  < PARAM NAME = "WebUtilErrorMode" VALUE = "Alert" >
  < PARAM NAME = "WebUtilDispatchMonitorInterval" VALUE = "5" >
  < PARAM NAME = "WebUtilTrustInternal" VALUE = "true" >
  < PARAM NAME = "WebUtilMaxTransferSize" VALUE = "16384" >
  < COMMENT >
  < EMBED SRC = "" PLUGINSPAGE = 'http://java.sun.com/products/archive/j2se/1.4.2_06/index.html' "
  TYPE = application/x-Java-applet"; YPI-version = 1.4.2_06.
  java_codebase = "/ forms/java.
  java_code = "Oracle.Forms.Engine.main"
  java_archive = "frmall.jar, ginico4.jar, laf.jar, formsmagnifier.jar, formsmagnifier10123.jar, handleimage3.jar, fjtable.jar, frmwebutil.jar, jacob.jar"
  WIDTH = "900".
  HEIGHT = "800".
  HSPACE = "0".
  HSPACE = "0".
  serverURL = "/ forms/lservlet?" ifcfs = / forms/frmservlet? config = gin4 & acceptLanguage = en-US, en; q = 0.8"
  networkRetries = '30 '.
  serverArgs = "" escapeParams = true module = GINFS001.fmx userid = sso_userid = sso_formsid % 20 = % 25OID_FORMSID % 25 sso_subDN sso_usrDN = debug = no = no host = buffer_records port = no = no debug_messages = no table only = no obr = no query_only no = no = yes render peace = no trace = tracegroup = log = term=/orasoft/OraHome_1/forms/admin/resource/US/fmrpcweb.res UTI = PASS IDIOMA = ADMGIN = admgin PM$CSS_FILENAME=/gin/gin4/exe/forms.css = ""
  separateFrame = 'true '.
  splashScreen = 'no '.
  Background = "Fundo.jpg"
  lookAndFeel = 'oracle '.
  colorScheme = 'blue '.
  serverApp = "default".
  logo = "REMATE_MENU.gif"
  imageBase = 'code '.
  recordFileName =""
  EndUserMonitoringEnabled =""
  EndUserMonitoringURL =""
  Pulsation =""
  WebUtilLogging = 'off '.
  WebUtilLoggingDetail = 'normal '.
  WebUtilErrormode = "Alert"
  WebUtilDispatchMonitorInterval = '5 '.
  WebUtilTrustInternal = 'true '.
  WebUtilMaxTransferSize = "16384.
  >
  < NOEMBED >
  < / COMMENT >
  < / NOEMBED > < / EMBED >
  < / OBJECT >
  <!-definition (end) forms-> applet
  
  < / BODY >
  < / HTML >
  
  
  
  Any help is appreciated.
  
  Best regards
  Igor Carrasco

  Igor Carrasco says:
  Also in the article you gave me it pretends that would work any higher version

  This applies only when you use the dynamic as versions mentioned in the above article that you don't not firerfox as far as I can tell from the basexyz.htm that you posted.

  Bascally there are 2 parameters that are used by browsers to check the version: jpi_classid and jpi_mimetype. jpi_codebase and jpi_download_page are used to provide information to download the plugins only appropriate in the correct versions.

  The jpi_classid and jpi_codebase parameters are used by Internet Explorer (and as it seems too much chrome); jpi_mimetype and jpi_download_page are used by browsers like firefox mozilla based.

  You have specified

  jpi_classid=CAFEEFAC-0014-0002-0006-ABCDEFFEDCBA
  

  so that means you want to use 1.4.2_06 with internet explore. IE is a bit lazy in this regard (as far as I know) and uses specified version or any higher if you have installed everything (beginning just your forms app and take a look in the java console which version you use).

  the specified MIME type is

  jpi_mimetype=application/x-java-applet;jpi-version=1.4.2_06
  

  Now, firefox works as expected and requires the exact version: 1.4.2_06. The firefox version recognizes your side 1.6.0_20 which is not the version would be asked at all.

  As mentioned in the article, you can use dynamic versioning to specify at least one major version that should be used:

  jpi_mimetype=application/x-java-applet;jpi-version=1.6.0
  

  would mean you can use any Plugin Java 1.6.0 (from 1.6.0_01 to 1.6.0_21)

  If you for example use a any version of the YPI you could simply do

  jpi_mimetype=application/x-java-applet
  

  to run it with any installed YPI (from 1.4.x to 1.6.x)

  see you soon

• Windows Update fails with the error 'WindowsUpdate_0000057E '.

  I have windows vista, but my microsoft office is 2002.

  For the latest updates of the week 2 windows keep failing.
  1 security Update for Microsoft Excel 2002 (KB959988)
  2. Update for Office XP (KB933388)

  Whenever the update fails, I get the error "WindowsUpdate_0000057E".

  I'm not good with computers and need help on how to fix this...
  

  

  When you try to download an ActiveX control, install an update to Windows or to a Windows component, install a service pack for Windows or to a Windows component, or install a Microsoft or third-party software, you may experience one or more of the following symptoms:

  • You may receive the following error message when you try to install a program or update:
    Digital signature not found
    The Microsoft digital signature affirms that software has been tested with Windows and that the software has not been changed since then, it has been tested.
    The software you are about to install does not contain a Microsoft digital signature. There is therefore no guarantee that this software works correctly with Windows.
    Package name
    If you want to search for Microsoft digitally software signed, refer to the Windows Update Web site at http://windowsupdate.microsoft.com to see if one is available.
    Do you want to continue the installation?

    If you click Details, you receive the following message is displayed:

    Microsoft Windows
    The signature on the software package you want to install is not valid. The package is not signed correctly.

    After you click OK in the first error message dialog box, you may receive a message that States that the installation was successful, or you may receive the following error message:

    Name of the Update Package
    The cryptographic operation failed due to a local security option setting.
  • When you try to install an update or to install a service pack, you may receive an error message that is similar to one of the following:
    • Name of the Update Package
  
  The Setup program could not verify the integrity of the file Update.inf. Make sure the cryptographic service is running on this computer.
• Failed to install catalog files.
• The software you are installing has not passed Windows Logo testing to verify its compatibility with Windows XP. (Tell me why this testing is important).

  This software will not be installed. Contact your system administrator.

• The software you are installing has not passed Windows Logo testing to verify its compatibility with this version of Windows. (Tell me why this testing is important).
• When you try to install a service pack Windows XP, you may receive an error message similar to the following:
  Service Pack 1 Setup could not verify the integrity of the file. Make sure the cryptographic service is running on this computer
• When you try to install Microsoft Data Access Components (MDAC) 2.8, you may receive an error message similar to the following:
  «"" "INF. cause installation failure: the timestamp signature and/or certificate could not be verified or is incorrect.»»»"
• The %WINDIR%\System32\CatRoot2\Edb.log may reach 20 megabytes (MB) even though the file is typically less than 1 MB.
• When you try to install a package from the Windows Update Web site or the Microsoft Update Web site, you may receive a message that is similar to the following:
  The software has not passed Windows logo testing and will not be installed.
• When you examine the file % systemroot%\Windowsupdate.log, you should see an entry for one of the following errors:
  • 0 x 80096001
  • 0 x 80096005
  • 0 x 80096010
  • 0x800B0001
  • 0x800B0003
  • 0x800B0004
  • 0x800B0109
  • 0x8007F0DA
  • 0x8007f01e
• When you use Microsoft windows update on a Windows XP-based computer, the update process may fail and you may receive an error message "0x8007f007". This can happen regardless of what type of update you select.

The Svcpack.log file may contain entries that are similar to the following:

937.406: GetCatVersion: failed to retrieve version information from C:\WINDOWS\system32 \CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\Tmp.0.scw.cat with error 0 x 57 937.437: GetCatVersion: failed to retrieve the version information of C:\WINDOWS\Tmp.0.scw.cat with error 0 x 80092004 940.344: InstallSingleCatalogFile: failure failed for Tmp.0.scw.cat; error = 0xfffffbfe. 940.344: DoInstallation failed failed: STR_CATALOG_INSTALL_FAILED 955.125: UnRegisterSpuninstForRecovery, failed to delete SpRecoverCmdLine, 0 error value x 2 955.125: DoInstallation: has no cancellation of registration of spuninst.exe for recovery. 962.656: cancel registration of uninstall-> Windows Server 2003 Service Pack, 0 962.656: impossible to install catalog files. 1448.406: message displayed to the user: cannot install catalog files. 1448.406: user Input: OK 1448.406: Update.exe extended error code = 0xf01e 1448.406: Update.exe return code was masked to 0 x 643 for MSI custom action compliance.
Back to top

CAUSE

This problem may occur if one or more of the following conditions are met: Log...
This problem may occur if one or more of the following conditions are met:
• Log file or database corruption exists in the folder % Systemroot%\System32\Catroot2.
• Cryptographic services is set to disabled.
• Other Windows files are corrupted or missing.
• The timestamp signature or the certificate cannot be verified, or is incorrect.
• The hidden attribute is set to the folder %windir%, or one of its subfolders.
• No unsigned installation behavior group policy setting (Windows 2000 only) is set to do not allow installation or warn, but allow installationor the policy of binary value is not set to 0 in the following registry key:
  The HKEY_LOCAL_MACHINE\Software\Microsoft\Non-Driver signing
• The group policy enable trusted publisher lockdown setting is turned on, and you do not have the appropriate certificate in your trusted publishers certificate store. This group policy setting is under User Configuration, under Windows settings, Internet Explorer Maintenance, under Security, under Authenticode settings in the Group Policy MMC snap-in.
• You install Internet Explorer 6 SP1 and the update of security 823559 (MS03-023) is installed. For more information about this issue, click on the number below to view the article in the Microsoft Knowledge Base:
  828031 (http://support.microsoft.com/kb/828031/) error "the software you are installing has not passed Windows Logo testing...". "message when you try to install Internet Explorer 6 Service Pack 1
• The software distribution folder is corrupted.
Back to top

RESOLUTION

To resolve this problem, use the following methods. Once you perform the operations...
To resolve this problem, use the following methods. After completing the steps in each method, check to see if the issue is resolved before you go to the next method. If the problem is resolved by any method, you do not have to use other methods.

Back to top

Method 1: Rename the Edb.log file rename the Edb.log file, and then try again to install the program. To rename the Edb.log file, follow these steps:

1. Click Start, click run, type cmd in the Open box, and then OK.

   Note On a Windows Vista-based computer, click Start, type cmd in the box to search for text and right click on cmd.exe, and then click run as administrator.

2. At the command prompt, type the following command and press ENTER:
   Ren %systemroot%\system32\catroot2\Edb.log *.tst

Back to top

Method 2: Set the Services of cryptography on AutoSet to automatic Cryptographic Services and then try again to install the program. To set the cryptographic on AutoServices, follow these steps:

1. Start the Administrative Tools utility in control Panel.
2. Double-click Services.
3. Click Cryptographic Services, and then click Properties.
4. Click Automatic for Startup type, and then click Start.

Note Windows 2000 does not list Cryptographic Services in the SERVICES Administration utility.

Back to top

Method 3: Rename the folder Catroot2 rename the Catroot2 (Windows XP and Windows Server 2003 only) folder and then try to install the program again.

Note Skip this method if the operating system is Windows 2000.

To rename the Catroot2 folder, follow these steps:

1. Click Start, click run, type cmd, and then click OK.
2. At the command prompt, type the following commands and press ENTER after each line:
   net stop cryptsvc
   Ren %systemroot%\System32\Catroot2 oldcatroot2
   net start cryptsvc
   output
3. Remove all tmp*.cat to the following folder:
   % systemroot%\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

   If any of the files that begin with tmp exist in this folder, do not remove any other files. Files .cat in this folder are necessary for installing hotfixes and service packs.

Important Do not rename the folder C:\windows\system32\catroot. The Catroot2 folder is automatically recreated by Windows, but the C:\windows\system32\catroot folder is not recreated if is renamed the folder C:\windows\system32\catroot.

Back to top

Method 4: Reregister DLL files that are associated with Cryptographic Services for files .dll registry that are associated with Cryptographic Services, follow these steps:

1. Click Start, click run, type cmd in the Open box, and then OK.

   Note On a Windows Vista-based computer, click Start, type cmd in the Search box and right-click on cmd.exe, and then click run as administrator.

2. At the command prompt, type the following commands and press ENTER after each command:
   regsvr32 /u softpub.dll
   regsvr32 /u wintrust.dll
   regsvr32 /u initpki.dll
   regsvr32 /u dssenh.dll
   regsvr32 /u rsaenh.dll
   regsvr32 /u gpkcsp.dll
   regsvr32 /u sccbase.dll
   regsvr32 /u slbcsp.dll
   regsvr32 /u mssip32.dll
   regsvr32 /u cryptdlg.dll
   output

   Note If you are prompted, click OK .

   Note Microsoft Windows 2000 does not include the Sccbase.dll file. If you are running a version of Windows 2000, omit the Sccbase.dll file.

3. Restart your computer.
4. Click Start, click run, type cmd in the Open box, and then click OK.
5. At the command prompt, type the following commands and press ENTER after each command:
   regsvr32 softpub.dll
   regsvr32 wintrust.dll
   regsvr32 initpki.dll
   regsvr32 dssenh.dll
   regsvr32 rsaenh.dll
   regsvr32 gpkcsp.dll
   regsvr32 sccbase.dll
   regsvr32 slbcsp.dll
   regsvr32 mssip32.dll
   regsvr32 cryptdlg.dll
   output

   Note If you are prompted, click OK .

   Note Microsoft Windows 2000 does not include the Sccbase.dll file. If you are running a version of Windows 2000, omit the Sccbase.dll file.

6. Restart the computer.
Back to top

Method 5: Remove the hidden %windir%\System32 and its subfolders attribute

1. Click Start, click run, type cmd in the Open box, and then OK.

   Note On a Windows Vista-based computer, click Start, type cmd in the Search box and right-click on cmd.exe, and then click run as administrator.

2. At the command prompt, type the following commands, pressing ENTER after each line:
   attrib s h % windir %
   attrib s h %windir%\system32
   attrib s h %windir%\system32\catroot2

output
Back to top

Method 6: Set a strategy without driver signature silently succeed if you are running a version of Windows 2000, set the silent success no unsigned installation behavior group policy setting. This group policy setting located under Computer Configuration, under Windows settings, under security settings, under local policies, under Security Options in the Group Policy MMC snap-in. If you are running Windows XP or a later version of Windows, this group policy setting is no longer supported. In this case, follow these steps to resolve this problem:

1. Click Start, click run, type regedit, and then click OK.

   Note On a Windows Vista-based computer, click Start, type regedit in the Search box and click on regedit.exe, and then click run as administrator.

2. Locate and then click the following key in the registry:
   The HKEY_LOCAL_MACHINE\Software\Microsoft\Non-Driver signing
3. Right-click on the Policy binary value, and then click change.
4. The value data will appear in the following format:
   0000 02

   Press DELETE to remove the current value (02 in this example), and then type 0 (the current value will now appear as 00).

5. Click OK, and then quit the registry editor.
Back to top

Method 7: Temporarily turn off Trusted Publishers Lockdown and install the certificates to your trusted publishers certificate store you can continue to use the group policy enable trusted publisher lockdown setting, but you must first add the certificates in your trusted publishers certificate store. To do this, disable the group policy enable trusted publisher lockdown setting, install the certificates in your certificate and then trusted publishers store on the setting of group policy enable trusted publisher lockdown again. To install the certificate suitable for Microsoft Windows and Microsoft Internet Explorer updates, follow these steps:

1. Download the product of Microsoft update you want to install from the Microsoft Download Center, the Windows Update Catalog or the Microsoft Update Catalog. For more information about how to download updates from Microsoft Download Center, click the number below to view the article in the Microsoft Knowledge Base:
   119591 (http://support.microsoft.com/kb/119591/) how to obtain technical support files from Online Services Microsoft

   For more information about how to download updates from the Windows Update Catalog, click on the number below to view the article in the Microsoft Knowledge Base:

323166 (http://support.microsoft.com/kb/323166/) how to download updates that include drivers and hotfixes from the Windows Update Catalog
• Extract the package to update product in a temporary folder. The command line that you use to do this depends on the update that you are trying to install. View the Microsoft Knowledge Base article associated with the update to determine the command line switches appropriate that you will use to extract the package. For example, to extract the 824146 security for Windows XP update to the C:\824146 folder, run Windowsxp-kb824146 - x 86 - enu - x: c: \824146. To extract the 828750 security for Windows XP update to the C:\828750 folder, run q828750.exe/c t:c:\828750.
• Right click on the file KBNumber.cat to the package to update product to the temporary folder you created in step 2, and then click Properties.

  Note The KBNumber.cat file may be in a subfolder. For example, the file may be in the C:\824146\sp1\update folder or in the C:\824146\sp2\update folder.

• On the Digital Signatures tab, click the digital signature and then click Details.
• Click view certificate, and then click install Certificate.
• Click Next to start the Certificate Import Wizard.
• Click place all certificates in the following store, and then click Browse.
• Click approved publishers, and then click OK.
• Click Next, click Finish, and then click OK.
Back to top

Method 8: Check the status of all certificates in the certification path and import missing certificates or damaged from another computer to verify certificates in the path of certificate for a Windows or Internet Explorer product update, follow these steps: step 1: Verify Microsoft certificates

1. In Internet Explorer, click on Toolsand then click Internet Options.
2. On the content tab, click certificates.
3. Certificate authorities roots of trust tab, double-click Microsoft Root Authority. If this certificate is missing, go to step 2.
4. On the general tab, make sure that the dates valid from are 10/01/1997 to 12/31/2020.
5. Under the Certificate path tab, verify that this certificate is OK appears under certificate status.
6. Click OKand then double-click the NO LIABILITY ACCEPTED certificate.
7. On the general tab, make sure that the dates valid from are 11/05/1997 to 01/07/2004.
8. On the Certificate path tab, check whether the certificate has expired or is not yet valid or this certificate is OK appears under certificate status.

   Note Although this certificate is expired, the certificate will continue to work. The operating system may not work properly if the certificate is missing or revoked. For more information, click on the number below to view the article in the Microsoft Knowledge Base:

   293781 (http://support.microsoft.com/kb/293781/) Trusted certificate root that are required by Windows 2000, Windows XP and Windows Server 2003
9. Click OKand then double-click the GTE CyberTrust Root certificate. You can have more than one of these certificates with the same name. Check the certificate that has an expiration date of 02/23/2006.
10. On the general tab, make sure that the dates valid from are "23/02/1996-02/23/2006."
11. Under the Certificate path tab, verify that this certificate is OK appears under certificate status.

    Note Although this certificate is expired, the certificate will continue to work. The operating system may not work properly if the certificate is missing or revoked. For more information, click on the number below to view the article in the Microsoft Knowledge Base:

293781 (http://support.microsoft.com/kb/293781/) Trusted certificate root that are required by Windows 2000, Windows XP and Windows Server 2003
• Click OK, and then double-click Thawte Timestamping CA.
• On the general tab, make sure that the dates valid from are "31/12/1996 to 12/31/2020."
• Under the Certificate path tab, verify that this certificate is OK appears under certificate status.

Step 2: Import the missing certificates or damaged if one or more of these certificates are missing or corrupted, export the missing certificates or damaged on another computer, and then install the certificates on your computer. To export certificates to another computer, follow these steps:

1. In Internet Explorer, click on Toolsand then click Internet Options.
2. On the content tab, click certificates.
3. Certificate authorities roots of trust tab, click the certificate you want to export.
4. Click export, and then follow the instructions to export the certificate as a DER encoded Binary x.509 (.) REB) file.
5. Once the certificate file has been exported, copy it to the computer where you want to import.
6. On the computer where you want to import the certificate, double-click the certificate.
7. Click install Certificate, and then click Next.
8. Click Finish, and then click OK.
Back to top

Method 9: Clear the temporary file and restart the hotfix installation or the installation of the service pack Note Skip this method if the operating system is Windows 2000.

To clear the temporary file and restart the hotfix installation or the service pack installation, follow these steps:

1. Remove all tmp*.cat of the following folders:

   systemroot\system32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}

   systemroot\system32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}

2. Delete all the kb*.cat files in the following folders:
   % systemroot%\System32\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}
   % systemroot%\System32\CatRoot\{127D0A1D-4EF2-11D1-8608-00C04FC295EE}
3. Remove all the oem *. * files in the % systemroot %\inf folder.
4. At the command prompt, type the following commands. Press ENTER after each command.
   net stop cryptsvc
   Ren %systemroot%\System32\Catroot2 oldcatroot2
   net start cryptsvc
   output
5. Restart the installation of the patch failed or the installation of the service pack.
Back to top

Method 10: Empty the software distribution folder

1. Click Start, click run, type services.msc and click OK.

Note On a Windows Vista-based computer, click Start, type services.msc in the Search box, click services.mscand then click run as administrator.

• In the Services (Local) pane, click automatic updates, and then click stop.
• Reduce the Services (local) window.
• Select all the contents of the Windows distribution folder, and then delete them.

  Note By default, the Windows distribution folder is located in the folder drive: \Windows\SoftwareDistribution. In this place, the drive is a placeholder for the drive where Windows is installed.

• Make sure that the Windows distribution folder is empty and enlarge the Services (local) window.
• In the Services (Local) pane, click automatic updates, and then click Start.
• Restart the computer, and then run Windows Update again.
Back to top

Method 11: Perform an upgrade on site for more information about how to perform an upgrade on the spot, click on the number below to view the article in the Microsoft Knowledge Base:

315341 (http://support.microsoft.com/kb/315341/) how to perform an upgrade on the spot (reinstallation) of Windows XP
Back to top

MORE INFORMATION

For more information about a resolution that is intended for Windows 2000 only.
For more information about a resolution that is intended for Windows 2000 only, click on the number below to view the article in the Microsoft Knowledge Base:
281458 (http://support.microsoft.com/kb/281458/) error message when you install a service pack Windows 2000 or product update
This problem has been reported to occur with the following updates:
328310 (http://support.microsoft.com/kb/328310/) MS02-071: a failure in management of Windows WM_TIMER messages may allow elevation of privileges
810565 (http://support.microsoft.com/kb/810565/) of the hyperlinks open in Internet Explorer instead of in default browser or Help and Support Center
327979 (http://support.microsoft.com/kb/327979/) game stops responding (hangs) or when the introductory video is played
322011 (http://support.microsoft.com/kb/322011/) you cannot preview a fax in the Fax Console
811630 (http://support.microsoft.com/kb/811630/) HTML Help update to limit functionality when it is invoked with the window.showHelp method)
810577 (http://support.microsoft.com/kb/810577/) MS03-005: a buffer uncontrolled in the Windows Redirector may allow elevation of privileges
329441 (http://support.microsoft.com/kb/329441/) you cannot create a network connection after you restore Windows XP
329170 (http://support.microsoft.com/kb/329170/) MS02-070: a flaw in SMB signing may permit group policy to change
810833 (http://support.microsoft.com/kb/810833/) MS03-001: buffer uncontrolled in the Locator service may allow code to run
For more information about configuring automatic updates in Windows XP, click on the number below to view the article in the Microsoft Knowledge Base:
306525 (http://support.microsoft.com/kb/306525/) how to configure and use automatic updates in Windows XP

Best regards, Sohail Patel "MCSE 2003 | ITILv3 | "A journey of a thousand miles begins with a first step."

• Root/CIMV2, MSFT_NetInvalidDriverDependency, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.

  I tried to rebuild WMI, but always with 30 errors

  30469 16:21:35 (0) * WMIDiag v2.1 began Monday, July 9, 2012 at 4:15.
  30470 16:21:35 (0) *.
  30471 16:21:35 (0) * copyright (c) Microsoft Corporation. All rights reserved - July 2007.
  30472 16:21:35 (0) *.
  30473 16:21:35 (0) * this script is not supported under a Microsoft standard support program or service.
  30474 16:21:35 (0) * the script is provided AS IS, without warranty of any kind. Microsoft disclaims any
  30475 16:21:35 (0) * implied warranties, including, without limitation, implied guarantees of marketability
  30476 16:21:35 (0) * or adequacy has a particular use. The entire risk arising out of use or performance
  30477 16:21:35 (0) * scripts and documentation remains with you. In any case, Microsoft, its authors,.
  30478 16:21:35 (0) * or anyone involved in the creation, production or delivery of the script is responsible for
  30479 16:21:35 (0) * damage whatsoever (including, without limitation, damages for loss of business profits,
  30480 16:21:35 (0) * business interruption, loss of business information or any other pecuniary loss) arising out of
  30481 16:21:35 (0) * the use or inability to use the script or documentation, even if Microsoft has been advised
  30482 16:21:35 (0) * of the possibility of such damages.
  30483 16:21:35 (0) *.
  30484 16:21:35 (0) *.
  30485 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30486 16:21:35 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
  30487 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30488 16:21:35 (0) *.
  30489 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30490 16:21:35 (0) * Windows Server 2008 R2 - Service pack 1 - user 64-bit (7601) - "MGATE\ECIADMIN" on the computer "BES".
  30491 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30492 16:21:35 (0) ** INFO: Environment: .................................................................................................. 1 ARTICLE (S)!
  30493 16:21:35 (0) * INFO:-online 4 shutdown (s) incorrect possible detected on:
  30494 16:21:35 (0) *-stop on January 19, 2012 23:30:23 (GMT-0).
  30495 16:21:35 (0) *-stop on January 19, 2012 23:50:41 (GMT-0).
  30496 16:21:35 (0) *-stop on February 9, 2012 15:37:35 (GMT-0).
  30497 16:21:35 (0) *-stop on July 7, 2012 00:58:51 (GMT-0).
  30498 16:21:35 (0) *.
  30499 16:21:35 (0) ** System drive: ....................................................................................................... C: (Disk Partition #0 #1).
  30500 16:21:35 (0) ** Drive type: ......................................................................................................... SCSI (virtual disk VMware SCSI Disk Device).
  30501 16:21:35 (0) * there is no missing file of WMI system:... Ok.
  30502 16:21:35 (0) * there is no missing WMI repository files:... Ok.
  30503 16:21:35 (0) * WMI repository state:... MORE LOGIC.
  30504 16:21:35 (0) * AFTER you run WMIDiag:
  30505 16:21:35 (0) * repository WMI has a size of:... 19 MB.
  30506 16:21:35 (0) *-free space on the "C:" drive:... 22250 MB.
  30507 16:21:35 (0) *-INDEX. BTR, 4349952 bytes, 09/07/2012 16:16:50
  30508 16:21:35 (0) *-MAPPING1. CARD, 51804 bytes, 07/09/2012-16:16:50
  30509 16:21:35 (0) *-MAPPING2. CARD, 51804 bytes, 07/09/2012-14:23:20
  30510 16:21:35 (0) *-OBJECTS. DATA, 15515648 bytes, 09/07/2012 16:16:50
  30511 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30512 16:21:35 (2)! WARNING: Windows Firewall: .......................................................................................... PEOPLE WITH DISABILITIES.
  30513 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30514 16:21:35 (0) ** DCOM Status: ........................................................................................................ Ok.
  30515 16:21:35 (0) * Registry WMI configuration:... Ok.
  30516 16:21:35 (0) * INFO: WMI service has dependents:... 1 SERVICE (S)!
  30517 16:21:35 (0) *-(ICS) (SHAREDACCESS, StartMode = 'Disabled') Internet connection sharing
  30518 16:21:35 (0) *-online if the WMI service is stopped, or the services listed should be stopped as well.
  30519 16:21:35 (0) * note: If the service is marked with a (*), this means that the service application / use WMI, but
  30520 16:21:35 (0) * there is no hard dependency on WMI. However, if the WMI service is stopped.
  30521 16:21:35 (0) * this can prevent the application of service / to work as expected.
  30522 16:21:35 (0) *.
  30523 16:21:35 (0) ** RPCSS service: ...................................................................................................... OK (already begun).
  30524 16:21:35 (0) ** WINMGMT service: .................................................................................................... OK (already begun).
  30525 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30526 16:21:35 (0) * for the WMI service DCOM configuration:... Ok.
  30527 16:21:35 (0) * components WMI DCOM registrations:... Ok.
  30528 16:21:35 (0) * records WMI ProgID:... Ok.
  30529 16:21:35 (2)! WARNING: WMI provider DCOM missing registrations for the following providers:... 3 WARNING (S)!
  30530 16:21:35 (0) *-ROOT/SNMP/LOCALHOST, MS_SNMP_REFERENT_EVENT_PROVIDER ({9D5BED16-0765-11D1-AB2C-00C04FD9159E})
  30531 16:21:35 (0) * the provider DLL: "
  30532 16:21:35 (0) *-ROOT/SNMP/LOCALHOST, MS_SNMP_CLASS_PROVIDER ({70426720-F78F-11CF-9151-00AA00A4086C})
  30533 16:21:35 (0) * the provider DLL: "
  30534 16:21:35 (0) *-ROOT/SNMP/LOCALHOST, MS_SNMP_ENCAPSULATED_EVENT_PROVIDER ({19C813AC-FEE7-11D0-AB22-00C04FD9159E})
  30535 16:21:35 (0) * the provider DLL: "
  30536 16:21:35 (0) * => this is a problem because there are still some WMI classes referencing this list of suppliers
  30537 16:21:35 (0) * while the DCOM registration is incorrect or missing. This may be due to:
  30538 16:21:35 (0) *-an uninstall of the software.
  30539 16:21:35 (0) *-a deletion of some data to registry keys.
  30540 16:21:35 (0) *-a corruption of the registry.
  30541 16:21:35 (0) * =>, you can correct the DCOM configuration by:
  30542 16:21:35 (0) *-running "REGSVR32. EXE ' command.
  30543 16:21:35 (0) * note: you can create a list of classes in relation to the WMI provider and the MOF with WMIDiag file.
  30544 16:21:35 (0) * (this list can be built on a WMI Windows similar and functional installation)
  30545 16:21:35 (0) * the following command line must be used:
  30546 16:21:35 (0) * i.e. "WMIDiag CorrelateClassAndProvider.
  30547 16:21:35 (2)! WARNING: The re-registration with REGSVR32. EXE DLL all the of 'C:\WINDOWS\SYSTEM32\WBEM\ '.
  30548 16:21:35 (0) * can not solve the problem as the DLL supporting the WMI classes
  30549 16:21:35 (0) * can be located in a different folder.
  30550 16:21:35 (0) * you must consult the class name to determine the software providing the associated DLL.
  30551 16:21:35 (0) *-online if the software has been uninstalled intentionally, so this information must be
  30552 16:21:35 (0) * deleted of the WMI repository. You can use the "WMIC. EXE' command to remove
  30553 16:21:35 (0) * registration of provider data.
  30554 16:21:35 (0) * i.e. ' WMIC. EXE /NAMESPACE:\\ROOT\SNMP\LOCALHOST path __Win32Provider Where Name = 'MS_SNMP_ENCAPSULATED_EVENT_PROVIDER' DELETE'
  30555 16:21:35 (0) *-online if namespace was ENTIRELY dedicated to the intentionally, uninstalled software
  30556 16:21:35 (0) * the namespace and ALL of its content can be ENTIRELY deleted.
  30557 16:21:35 (0) * i.e. ' WMIC. EXE /NAMESPACE:\\ROOT\SNMP path __NAMESPACE Where Name = 'LOCALHOST' DELETE'
  30558 16:21:35 (0) * - re - install the software.
  30559 16:21:35 (0) *.
  30560 16:21:35 (0) * registrations CIM WMI provider:... Ok.
  30561 16:21:35 (0) * provider WMI CLSID:... Ok.
  30562 16:21:35 (0) * availability EXE/DLL WMI providers:... Ok.
  30563 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30564 16:21:35 (0) * INFO: User Account Control (UAC):... PEOPLE WITH DISABILITIES.
  30565 16:21:35 (0) * INFO: filtering Local account:... PERMIT.
  30566 16:21:35 (0) *-online tasks WMI to access WMI information on this computer and that requires remote administration
  30567 16:21:35 (0) * privileges SHOULD use part of the DOMAIN of the Local computer administrators group account
  30568 16:21:35 (0) * to ensure that the privileges are granted. If a Local user account is used for outdoor
  30569 16:21:35 (0) * access, it will be reduced to a simple user (filtered token), even if it is part of the Local Administrators group.
  30570 16:21:35 (0) *.
  30571 16:21:35 (0) * global DCOM security status:... Ok.
  30572 16:21:35 (0) * overall WMI decision:... Ok.
  30573 16:21:35 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
  30574 16:21:35 (0) * INFO: SUBSCRIPTION permanent WMI (S):... 1.
  30575 16:21:35 (0) *-ROOT/SUBSCRIPTION, consumption of NTEventLogEventConsumer.Name event log = "SCM".
  30576 16:21:35 (0) * ' select * from MSFT_SCMEventLogEvent'
  30577 16:21:35 (0) *.
  30578 16:21:35 (0) * WMI TIMER method:... NONE.
  30579 16:21:35 (0) * INFO: WMI or requiring a CONFIDENTIALITY of the PACKAGE:... 2 NAMESPACE (S)!
  30580 16:21:35 (0) *-ROOT/CIMV2/SECURITY/MICROSOFTTPM.
  30581 16:21:35 (0) *-ROOT/CIMV2/TERMINALSERVICES.
  30582 16:21:35 (0) * => when connecting remotely, the or listed have the WMI client
  30583 16:21:35 (0) * use an encrypted connection by specifying the level of CONFIDENTIALITY of the PACKET authentication.
  30584 16:21:35 (0) * (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)
  30585 16:21:35 (0) * i.e. ' WMIC. EXE/node: "NYBES' /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\CIMV2\TERMINALSERVICES Class __SystemSecurity'
  30586 16:21:35 (0) *.
  30587 16:21:35 (0) * THE WMI MONIKER CONNECTIONS:... Ok.
  30588 16:21:35 (0) ** WMI CONNECTIONS: .................................................................................................... Ok.
  30589 16:21:35 (1). ERROR: WMI GET operation reported errors:... ERROR 32 (S)!
  30590 16:21:35 (0) * - Root/CIMV2, MSFT_NetInvalidDriverDependency, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30591 16:21:35 (0) * MOF registration: "
  30592 16:21:35 (0) * - Root/CIMV2, Win32_OsBaselineProvider, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30593 16:21:35 (0) * MOF registration: "
  30594 16:21:35 (0) * - Root/CIMV2, Win32_OsBaseline, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30595 16:21:35 (0) * MOF registration: "
  30596 16:21:35 (0) * - Root/CIMV2, Win32_DriverVXD, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30597 16:21:35 (0) * MOF registration: "
  30598 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_BITS_BITSNetUtilization, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30599 16:21:35 (0) * MOF registration: "
  30600 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_BITS_BITSNetUtilization, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30601 16:21:35 (0) * MOF registration: "
  30602 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_GenericIKEandAuthIP, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30603 16:21:35 (0) * MOF registration: "
  30604 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_GenericIKEandAuthIP, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30605 16:21:35 (0) * MOF registration: "
  30606 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30607 16:21:35 (0) * MOF registration: "
  30608 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30609 16:21:35 (0) * MOF registration: "
  30610 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30611 16:21:35 (0) * MOF registration: "
  30612 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30613 16:21:35 (0) * MOF registration: "
  30614 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30615 16:21:35 (0) * MOF registration: "
  30616 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv4, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30617 16:21:35 (0) * MOF registration: "
  30618 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30619 16:21:35 (0) * MOF registration: "
  30620 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv6, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30621 16:21:35 (0) * MOF registration: "
  30622 16:21:35 (0) * - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServices, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30623 16:21:35 (0) * MOF registration: "
  30624 16:21:35 (0) * - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServices, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30625 16:21:35 (0) * MOF registration: "
  30626 16:21:35 (0) * - root/WMI, ReserveDisjoinThread, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30627 16:21:35 (0) * MOF registration: "
  30628 16:21:35 (0) * - root/WMI, ReserveLateCount, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30629 16:21:35 (0) * MOF registration: "
  30630 16:21:35 (0) * - root/WMI, ReserveJoinThread, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30631 16:21:35 (0) * MOF registration: "
  30632 16:21:35 (0) * - root/WMI, ReserveDelete, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30633 16:21:35 (0) * MOF registration: "
  30634 16:21:35 (0) * - root/WMI, ReserveBandwidth, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30635 16:21:35 (0) * MOF registration: "
  30636 16:21:35 (0) * - root/WMI, ReserveCreate, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30637 16:21:35 (0) * MOF registration: "
  30638 16:21:35 (0) * - root/WMI, SystemConfig_PhyDisk, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30639 16:21:35 (0) * MOF registration: "
  30640 16:21:35 (0) * - root/WMI, SystemConfig_Video, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30641 16:21:35 (0) * MOF registration: "
  30642 16:21:35 (0) * - root/WMI, SystemConfig_IDEChannel, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30643 16:21:35 (0) * MOF registration: "
  30644 16:21:35 (0) * - root/WMI, SystemConfig_NIC, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30645 16:21:35 (0) * MOF registration: "
  30646 16:21:35 (0) * - root/WMI, SystemConfig_Network, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30647 16:21:35 (0) * MOF registration: "
  30648 16:21:35 (0) * - root/WMI, SystemConfig_CPU, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30649 16:21:35 (0) * MOF registration: "
  30650 16:21:35 (0) * - root/WMI, SystemConfig_LogDisk, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30651 16:21:35 (0) * MOF registration: "
  30652 16:21:35 (0) * - root/WMI, SystemConfig_Power, 0 x 80041002 - object (WBEM_E_NOT_FOUND) is not found.
  30653 16:21:35 (0) * MOF registration: "
  30654 16:21:35 (0) *-online performance when WMI class is missing (for example "Win32_PerfRawData_TermService_TerminalServices"), it is usually due to
  30655 16:21:35 (0) * a lack of refresh of the buffer of the WMI provider class exposing WMI performance counters.
  30656 16:21:35 (0) * you can update the WMI provider class buffer with the following command:
  30657 16:21:35 (0) *.
  30658 16:21:35 (0) * i.e. "WINMGMT. EXE /SYNCPERF'
  30659 16:21:35 (0) *.
  30660 16:21:35 (0) * representations WMI MOF:... Ok.
  30661 16:21:35 (0) * WMI QUALIFIER access operations:... Ok.
  30662 16:21:35 (0) * WMI ENUMERATION operations:... Ok.
  30663 16:21:35 (2)! WARNING: Operation WMI EXECQUERY reported errors:... 1 WARNING (S)!
  30664 16:21:35 (0) *-Root/CIMV2, ' Select * from Win32_USBController' did not return any instance while the instance at LEAST 1.
  30665 16:21:35 (0) *.
  30666 16:21:35 (2)! WARNING: GET the VALUE WMI operation reported errors:... 5 WARNING (S)!
  30667 16:21:35 (0) *-root, example: __EventConsumerProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
  30668 16:21:35 (0) *-root, example: __EventProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
  30669 16:21:35 (0) *-root, example: __EventSinkCacheControl = @, property: ClearAfter = "00000000000015.000000:000" (expected default = "00000000000230.000000:000").
  30670 16:21:35 (0) *-root, example: __ObjectProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
  30671 16:21:35 (0) *-root, example: __PropertyProviderCacheControl = @, property: ClearAfter = "00000000000030.000000:000" (expected default = "00000000000500.000000:000").
  30672 16:21:35 (0) *.
  30673 16:21:35 (0) * WRITE WMI operations:... NOT TESTED.
  30674, 16:21:35 (0) * WMI PUT operations:... NOT TESTED.
  30675 16:21:35 (0) * WMI DELETE operations:... NOT TESTED.
  30676 16:21:35 (0) * the static instances of WMI retrieved:... 1934.
  30677 16:21:35 (0) * WMI dynamic instances retrieved:... 0.
  30678 16:21:35 (0) * WMI instance request cancellations (to limit the performance impact):... 1.
  30679 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30680 16:21:35 (0) * number of events in the event log BEFORE run WMIDiag since the last 20 day (s):
  30681 16:21:35 (0) **   DCOM: ............................................................................................................. 0.
  30682 16:21:35 (0) **   WINMGMT: .......................................................................................................... 0.
  30683 16:21:35 (0) **   WMIADAPTER: ....................................................................................................... 0.
  30684 16:21:35 (0) *.
  30685 16:21:35 (0) * number of events AFTER you run WMIDiag additional event log:
  30686 16:21:35 (0) **   DCOM: ............................................................................................................. 0.
  30687 16:21:35 (0) **   WINMGMT: .......................................................................................................... 0.
  30688 16:21:35 (0) **   WMIADAPTER: ....................................................................................................... 0.
  30689 16:21:35 (0) *.
  30690 16:21:35 (0) * 32 error (s) 0 x 80041002 - (WBEM_E_NOT_FOUND) object not found
  30691 16:21:35 (0) *-online this error is usually a WMI error. This WMI error is due to:
  30692 16:21:35 (0) *-a missing definition of WMI class or object.
  30693 16:21:35 (0) * (see any failure of a GET operation, ENUMERATION, EXECQUERY and GET the VALUE).
  30694 16:21:35 (0) * you can correct the missing class definitions by:
  30695 16:21:35 (0) *-the MOF file (s) recompile manually with the command "MOFCOMP .
  30696 16:21:35 (0) * note: you can create a list of classes in relation to the WMI provider and the MOF with WMIDiag file.
  30697 16:21:35 (0) * (this list can be built on a WMI Windows similar and functional installation)
  30698 16:21:35 (0) * the following command line must be used:
  30699 16:21:35 (0) * i.e. "WMIDiag CorrelateClassAndProvider.
  30700 16:21:35 (0) * note: when a WMI class performance class is missing, you can manually resynchronize the performance counters
  30701 16:21:35 (0) * with WMI by starting the ADAP process.
  30702 16:21:35 (0) *-a corruption of WMI repository.
  30703 16:21:35 (0) * in such a case, you must re-run the WMIDiag with the parameter "WriteInRepository.
  30704 16:21:35 (0) * to validate the WMI repository operations.
  30705 16:21:35 (0) * note: make sure THAT you are an administrator with FULL access to ALL WMI of the computer before namespaces
  30706 16:21:35 (0) * the WriteInRepository command. To write temporary data of the root namespace, use:
  30707 16:21:35 (0) * i.e. 'WMIDiag WriteInRepository = Root'
  30708 16:21:35 (0) *-if the WriteInRepository command fails, while an administrator with all access to all namespaces
  30709 16:21:35 (0) * the WMI repository needs to be rebuilt.
  30710 16:21:35 (0) * note: rebuilding the WMI repository is required to locate all MOF files that are needed to rebuild the repository.
  30711 16:21:35 (0) * otherwise, some applications may fail after the reconstruction.
  30712 16:21:35 (0) * this can be achieved with the following command:
  30713 16:21:35 (0) * i.e. "WMIDiag ShowMOFErrors.
  30714 16:21:35 (0) * note: the reconstruction of the repository should be a solution of LAST RESORT and ONLY after execution
  30715 16:21:35 (0) * all patches previously mentioned.
  30716 16:21:35 (2)! WARNING: Static information stored by external applications in the repository will be LOST! (e.g., the SMS inventory)
  30717 16:21:35 (0) *.
  30718 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30719 16:21:35 (0) * unexpected, registry keys values incorrect or absent:... 1 KEY (S)!
  30720 16:21:35 (0) * INFO: unexpected registry key value:
  30721 16:21:35 (0) *-current: HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging (REG_SZ)-> 0
  30722 16:21:35 (0) *-expected: HKLM\SOFTWARE\Microsoft\WBEM\CIMOM\Logging (REG_SZ)-> 1
  30723 16:21:35 (0) * from the command line, the configuration of the registry can be corrected with the following command:
  30724 16:21:35 (0) * i.e. ' Reg. Add EXE /v "HKLM\SOFTWARE\Microsoft\WBEM\CIMOM", "Registration" t "REG_SZ" d '1' f'
  30725 16:21:35 (0) *.
  30726 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30727 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30728 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30729 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30730 16:21:35 (0) *.
  30731 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30732 16:21:35 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
  30733 16:21:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
  30734 16:21:35 (0) *.
  30735 16:21:35 (0) * ERROR: detected WMIDiag to problems that could prevent WMI works properly!  Check ' C:\USERS\ECIADMIN\APPDATA\LOCAL\TEMP\WMIDIAG-V2.1_2K8R2. SRV. SP1.64_NYBES_2012.07.09_16.15.16.log' for more details.
  30736 16:21:35 (0) *.
  30737 16:21:35 (0) * WMIDiag v2.1 ended Monday, July 9, 2012 at 16:21 (s: 1 W:79 E:38).

  Hi Jimmy Wang ,

   

   

  I wish you post your question in the TechNet Forums because it caters to an audience of professionals .

  To do this, you must refer to the below mentioned link.

  http://social.technet.Microsoft.com/forums/en-us/categories/

   

  Hope this helps!

   

• Encryption on Windows Ultimate

  Moved to Windows XP Security & Privacy for Windows 7 security & privacy>

  How to validate that my computer is now fully encrypted after you have downloaded the Windows Ultimate software that is supposed to contain encryption?

  Steve

  Ok.  Do you simply 'download' the DVD of Windows 7 Ultimate, or have you actually installed Windows 7 Ultimate?  Even if you have it installed, as I wrote above, nothing is encrypted until you take action to make it happen.  Your system is not "entirely encrypted" (all what you mean by that) simply by installing Windows 7 Ultimate.  You must take concrete steps to encrypt your data.

  Is that what you want to do?

  Are you referring to BitLocker, which encrypts the entire drive, or to the Encrypting File System (EFS), which allows you to encrypt files and folders individual?  In general, BitLocker is used in enterprise environments (this is why it is only available in Ultimate and Enterprise versions).

  And yet once again, I urge you NOT to encrypt anything until you fully understand what you are doing.  BitLocker and EFS are designed with no "back door" or other means of data recovery, if you lose or forget the encryption key.  Because there is no way to recover data that has been encrypted with a corrupted certificate or missing, it is critical that you back up the certificates and store them in a secure location. You can also specify a recovery agent. This agent can restore the data. The recovery agent certificate serves a different purpose than the certificate of the user.

  Make a read here:

  What is EFS file system?

  What is the difference between BitLocker Drive encryption and encrypting file system?

  Encrypt or decrypt a file or folder

  Best practices for the encrypting file system

  Best practices for BitLocker in Windows 7 (intended mainly for an organization using Active Directory)

  Using with BitLocker data recovery Agents

  In Windows 7 BitLocker Drive encryption, frequently asked Questions

  How to use BitLocker (Google search)

• Problem Cisco 2811 with L2TP IPsec VPN

  Hello. Sorry for my English. Help me please. I have problem with L2TP over IPsec VPN when I connect with Android phones. Even if I connect with laptop computers. I have Cisco 2811 - Cisco IOS software, 2800 Software (C2800NM-ADVIPSERVICESK9-M), Version 12.4 (2) T2, (fc3) SOFTWARE VERSION. I configured on L2TP over IPsec VPN with Radius Authentication

  My config:

  !
  AAA new-model
  !
  !
  AAA authentication login default local
  Ray of AAA for authentication ppp default local group
  AAA authorization network default authenticated if
  start-stop radius group AAA accounting network L2TP_RADIUS

  !
  dhcp L2tp IP pool
  network 192.168.100.0 255.255.255.0
  default router 192.168.100.1
  domain.local domain name
  192.168.101.12 DNS server
  18c0.a865.c0a8.6401 hexagonal option 121
  18c0.a865.c0a8.6401 hexagonal option 249

  VPDN enable
  !
  VPDN-group sec_groupe
  ! Default L2TP VPDN group
  accept-dialin
  L2tp Protocol
  virtual-model 1
  no authentication of l2tp tunnel

  session of crypto consignment
  !
  crypto ISAKMP policy 5
  BA 3des
  preshared authentication
  Group 2
  !
  crypto ISAKMP policy 55
  BA 3des
  md5 hash
  preshared authentication
  Group 2

  ISAKMP crypto key... address 0.0.0.0 0.0.0.0
  invalid-spi-recovery crypto ISAKMP
  ISAKMP crypto keepalive 10 periodicals
  !
  life crypto ipsec security association seconds 28000
  !
  Crypto ipsec transform-set esp-3des esp-sha-hmac L2TP
  transport mode
  Crypto ipsec transform-set esp-3des esp-md5-hmac 3DESMD5
  need transport mode
  !

  !
  !
  crypto dynamic-map DYN - map 10
  Set nat demux
  game of transformation-L2TP
  !
  !
  Crypto map 10 L2TP-VPN ipsec-isakmp dynamic DYN-map

  interface Loopback1
  Description * L2TP GateWay *.
  IP 192.168.100.1 address 255.255.255.255

  interface FastEthernet0/0
  Description * Internet *.
  address IP 95.6... 255.255.255.248
  IP access-group allow-in-of-wan in
  IP access-group allows-off-of-wan on
  no ip redirection
  no ip unreachable
  no ip proxy-arp
  NAT outside IP
  IP virtual-reassembly
  IP route cache policy
  automatic duplex
  automatic speed
  L2TP-VPN crypto card
  !

  interface virtual-Template1
  Description * PPTP *.
  IP unnumbered Loopback1
  IP access-group L2TP_VPN_IN in
  AutoDetect encapsulation ppp
  default IP address dhcp-pool L2tp peer
  No keepalive
  PPP mtu Adaptive
  PPP encryption mppe auto
  PPP authentication ms-chap-v2 callin
  PPP accounting L2TP_RADIUS

  L2TP_VPN_IN extended IP access list
  permit any any icmp echo
  IP 192.168.100.0 allow 0.0.0.255 192.168.101.0 0.0.0.255
  IP 192.168.100.0 allow 0.0.0.255 192.168.3.0 0.0.0.255
  allow udp any any eq bootps
  allow udp any any eq bootpc
  deny ip any any journal entry

  RADIUS-server host 192.168.101.15 auth-port 1812 acct-port 1813
  RADIUS server retry method reorganize
  RADIUS server retransmit 2
  Server RADIUS 7 key...

  Debugging shows me

  234195: * 3 Feb 18:53:38: ISAKMP (0:0): received 93.73.161.229 packet dport 500 sport 500 SA NEW Global (N)
  234196: * 3 Feb 18:53:38: ISAKMP: created a struct peer 93.73.161.229, peer port 500
  234197: * 3 Feb 18:53:38: ISAKMP: new position created post = 0x47D305BC peer_handle = 0x80007C5F
  234198: * 3 Feb 18:53:38: ISAKMP: lock struct 0x47D305BC, refcount 1 to peer crypto_isakmp_process_block
  234199: * 3 Feb 18:53:38: ISAKMP: 500 local port, remote port 500
  234200: * 3 Feb 18:53:38: insert his with his 480CFF64 = success
  234201: * 3 Feb 18:53:38: ISAKMP: (0): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH
  234202: * 3 Feb 18:53:38: ISAKMP: (0): former State = new State IKE_READY = IKE_R_MM1
  234203: * 3 Feb 18:53:38: ISAKMP: (0): treatment ITS payload. Message ID = 0
  234204: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234205: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 69
  234206: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234207: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 164
  234208: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234209: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 123
  234210: * 3 Feb 18:53:38: ISAKMP: (0): provider ID is NAT - T v2
  234211: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234212: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 221
  234213: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234214: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 194
  234215: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234216: * 3 Feb 18:53:38: ISAKMP: (0): provider ID is DPD
  234217: * 3 Feb 18:53:38: ISAKMP: (0): looking for a key corresponding to 93.73.161.229 in default
  234218: * 3 Feb 18:53:38: ISAKMP: (0): success
  234219: * 3 Feb 18:53:38: ISAKMP: (0): pair found pre-shared key matching 93.73.161.229
  234220: * 3 Feb 18:53:38: ISAKMP: (0): pre-shared key local found
  234221: * 3 Feb 18:53:38: ISAKMP: analysis of the profiles for xauth...
  234222: * 3 Feb 18:53:38: ISAKMP: (0): audit ISAKMP transform 1 against policy priority 5
  234223: * 3 Feb 18:53:38: ISAKMP: type of life in seconds
  234224: * 3 Feb 18:53:38: ISAKMP: life (basic) of 28800
  234225: * 3 Feb 18:53:38: ISAKMP: 3DES-CBC encryption
  234226: * 3 Feb 18:53:38: ISAKMP: pre-shared key auth
  234227: * 3 Feb 18:53:38: ISAKMP: SHA hash
  234228: * 3 Feb 18:53:38: ISAKMP: group by default 2
  234229: * 3 Feb 18:53:38: ISAKMP: (0): atts are acceptable. Next payload is 3
  234230: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234231: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 69
  234232: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234233: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 164
  234234: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234235: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 123
  234236: * 3 Feb 18:53:38: ISAKMP: (0): provider ID is NAT - T v2
  234237: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234238: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 221
  234239: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234240: * 3 Feb 18:53:38: ISAKMP: (0): provider ID seems the unit/DPD but major incompatibility of 194
  234241: * 3 Feb 18:53:38: ISAKMP: (0): load useful vendor id of treatment
  234242: * 3 Feb 18:53:38: ISAKMP: (0): provider ID is DPD
  234243: * 3 Feb 18:53:38: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
  234244: * 3 Feb 18:53:38: ISAKMP: (0): former State = new State IKE_R_MM1 = IKE_R_MM1

  234245: * 3 Feb 18:53:38: ISAKMP: (0): built the seller-02 ID NAT - t
  234246: * 3 Feb 18:53:38: ISAKMP: (0): lot of 93.73.161.229 sending my_port 500 peer_port 500 (R) MM_SA_SETUP
  234247: * 3 Feb 18:53:38: ISAKMP: (0): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
  234248: * 3 Feb 18:53:38: ISAKMP: (0): former State = new State IKE_R_MM1 = IKE_R_MM2

  234249: * 3 Feb 18:53:38: ISAKMP (0:0): received 93.73.161.229 packet 500 Global 500 (R) sport dport MM_SA_SETUP
  234250: * 3 Feb 18:53:38: ISAKMP: (0): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH
  234251: * 3 Feb 18:53:38: ISAKMP: (0): former State = new State IKE_R_MM2 = IKE_R_MM3

  234252: * 3 Feb 18:53:38: ISAKMP: (0): processing KE payload. Message ID = 0
  234253: * 3 Feb 18:53:38: crypto_engine: create DH shared secret
  234254: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_DH_SHARE_SECRET (hw) (ipsec)
  234255: * 3 Feb 18:53:38: ISAKMP: (0): processing NONCE payload. Message ID = 0
  234256: * 3 Feb 18:53:38: ISAKMP: (0): looking for a key corresponding to 93.73.161.229 in default
  234257: * 3 Feb 18:53:38: ISAKMP: (0): success
  234258: * 3 Feb 18:53:38: ISAKMP: (0): pair found pre-shared key matching 93.73.161.229
  234259: * 3 Feb 18:53:38: crypto_engine: create IKE SA
  234260: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_SA_CREATE (hw) (ipsec)
  234261: * 3 Feb 18:53:38: ISAKMP: receives the payload type 20
  234262: * 3 Feb 18:53:38: ISAKMP: receives the payload type 20
  234263: * 3 Feb 18:53:38: ISAKMP (0:5912): NAT found, the node outside NAT
  234264: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
  234265: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_R_MM3 = IKE_R_MM3

  234266: * 3 Feb 18:53:38: ISAKMP: (5912): lot of 93.73.161.229 sending my_port 500 peer_port 500 (R) MM_KEY_EXCH
  234267: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
  234268: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_R_MM3 = IKE_R_MM4

  234269: * 3 Feb 18:53:38: ISAKMP (0:5912): received 93.73.161.229 packet dport 4500 4500 Global (R) MM_KEY_EXCH sport
  234270: * 3 Feb 18:53:38: crypto_engine: package to decipher IKE
  234271: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_IKE_DECRYPT (hw) (ipsec)
  234272: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_FROM_PEER, IKE_MM_EXCH
  234273: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_R_MM4 = IKE_R_MM5

  234274: * 3 Feb 18:53:38: ISAKMP: (5912): payload ID for treatment. Message ID = 0
  234275: * 3 Feb 18:53:38: ISAKMP (0:5912): payload ID
  next payload: 8
  type: 1
  address: 192.168.1.218
  Protocol: 17
  Port: 500
  Length: 12
  234276: * 3 Feb 18:53:38: ISAKMP: (5912): peer games * no * profiles
  234277: * 3 Feb 18:53:38: ISAKMP: (5912): HASH payload processing. Message ID = 0
  234278: * 3 Feb 18:53:38: crypto_engine: hash generate IKE
  234279: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_IKE_HMAC (hw) (ipsec)
  234280: * 3 Feb 18:53:38: ISAKMP: (5912): SA authentication status:
  authenticated
  234281: * 3 Feb 18:53:38: ISAKMP: (5912): SA has been authenticated with 93.73.161.229
  234282: * 3 Feb 18:53:38: ISAKMP: (5912): port detected floating port = 4500
  234283: * 3 Feb 18:53:38: ISAKMP: attempts to insert a peer and inserted 95.6.../93.73.161.229/4500/ 47D305BC successfully.
  234284: * 3 Feb 18:53:38: ISAKMP: (5912): IKE_DPD is enabled, the initialization of timers
  234285: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_INTERNAL, IKE_PROCESS_MAIN_MODE
  234286: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_R_MM5 = IKE_R_MM5

  234287: * 3 Feb 18:53:38: ISAKMP: (5912): ITS been pre-shared key, using id ID_IPV4_ADDR type authentication
  234288: * 3 Feb 18:53:38: ISAKMP (0:5912): payload ID
  next payload: 8
  type: 1
  address: 95.6...
  Protocol: 17
  Port: 0
  Length: 12
  234289: * 3 Feb 18:53:38: ISAKMP: (5912): the total payload length: 12
  234290: * 3 Feb 18:53:38: crypto_engine: hash generate IKE
  234291: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_IKE_HMAC (hw) (ipsec)
  234292: * 3 Feb 18:53:38: crypto_engine: package to encrypt IKE
  routerindc #.
  234293: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_IKE_ENCRYPT (hw) (ipsec)
  234294: * 3 Feb 18:53:38: ISAKMP: (5912): lot of 93.73.161.229 sending peer_port my_port 4500 4500 (R) MM_KEY_EXCH
  234295: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_INTERNAL, IKE_PROCESS_COMPLETE
  234296: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_R_MM5 = IKE_P1_COMPLETE

  234297: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_INTERNAL, IKE_PHASE1_COMPLETE
  234298: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_P1_COMPLETE = IKE_P1_COMPLETE

  234299: * 3 Feb 18:53:38: ISAKMP (0:5912): received 93.73.161.229 packet dport 4500 4500 Global (R) QM_IDLE sport
  234300: * 3 Feb 18:53:38: ISAKMP: node set-893966165 to QM_IDLE
  234301: * 3 Feb 18:53:38: crypto_engine: package to decipher IKE
  234302: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_IKE_DECRYPT (hw) (ipsec)
  234303: * 3 Feb 18:53:38: crypto_engine: hash generate IKE
  234304: * 3 Feb 18:53:38: CryptoEngine0: CRYPTO_ISA_IKE_HMAC (hw) (ipsec)
  234305: * 3 Feb 18:53:38: ISAKMP: (5912): HASH payload processing. Message ID =-893966165
  234306: * 3 Feb 18:53:38: ISAKMP: (5912): treatment protocol NOTIFIER INITIAL_CONTACT 1
  SPI 0, message ID =-893966165, his 480CFF64 =
  234307: * 3 Feb 18:53:38: ISAKMP: (5912): SA authentication status:
  authenticated
  234308: * 3 Feb 18:53:38: ISAKMP: (5912): process of first contact.
  dropping existing phase 1 and 2 with 95.6 local... 93.73.161.229 remote remote port 4500
  234309: * 3 Feb 18:53:38: ISAKMP: (5912): node-893966165 error suppression FALSE reason 'informational (en) State 1.
  234310: * 3 Feb 18:53:38: ISAKMP: (5912): entry = IKE_MESG_FROM_PEER, IKE_INFO_NOTIFY
  234311: * 3 Feb 18:53:38: ISAKMP: (5912): former State = new State IKE_P1_COMPLETE = IKE_P1_COMPLETE

  234312: * 3 Feb 18:53:38: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
  234313: * 3 Feb 18:53:39: % s-6-IPACCESSLOGRL: registration of limited or missed rates 150 packages of access list
  234314: * 3 Feb 18:53:39: ISAKMP (0:5912): received 93.73.161.229 packet dport 4500 4500 Global (R) QM_IDLE sport
  234315: * 3 Feb 18:53:39: ISAKMP: node set-1224389198 to QM_IDLE
  234316: * 3 Feb 18:53:39: crypto_engine: package to decipher IKE
  234317: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IKE_DECRYPT (hw) (ipsec)
  234318: * 3 Feb 18:53:39: crypto_engine: hash generate IKE
  234319: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IKE_HMAC (hw) (ipsec)
  234320: * 3 Feb 18:53:39: ISAKMP: (5912): HASH payload processing. Message ID =-1224389198
  234321: * 3 Feb 18:53:39: ISAKMP: (5912): treatment ITS payload. Message ID =-1224389198
  234322: * 3 Feb 18:53:39: ISAKMP: (5912): proposal of IPSec checking 1
  234323: * 3 Feb 18:53:39: ISAKMP: turn 1, ESP_3DES
  234324: * 3 Feb 18:53:39: ISAKMP: attributes of transformation:
  234325: * 3 Feb 18:53:39: ISAKMP: type of life in seconds
  234326: * 3 Feb 18:53:39: ISAKMP: life of HIS (basic) of 28800
  234327: * 3 Feb 18:53:39: ISAKMP: program is 61444 (Transport-UDP)
  234328: * 3 Feb 18:53:39: ISAKMP: authenticator is HMAC-SHA
  234329: * 3 Feb 18:53:39: CryptoEngine0: validate the proposal
  234330: * 3 Feb 18:53:39: ISAKMP: (5912): atts are acceptable.
  234331: * 3 Feb 18:53:39: IPSEC (validate_proposal_request): part #1 of the proposal
  (Eng. msg key.) Local INCOMING = 95.6..., distance = 93.73.161.229,.
  local_proxy = 95.6.../255.255.255.255/17/1701 (type = 1),
  remote_proxy = 93.73.161.229/255.255.255.255/17/0 (type = 1),
  Protocol = ESP, transform = esp-3des esp-sha-hmac (UDP Transport),
  lifedur = 0 and 0kb in
  SPI = 0 x 0 (0), id_conn = 0, keysize = 0, flags = 0 x 0
  234332: * 3 Feb 18:53:39: map_db_find_best found no corresponding card
  234333: * 3 Feb 18:53:39: ISAKMP: (5912): processing NONCE payload. Message ID =-1224389198
  234334: * 3 Feb 18:53:39: ISAKMP: (5912): payload ID for treatment. Message ID =-1224389198
  234335: * 3 Feb 18:53:39: ISAKMP: (5912): payload ID for treatment. Message ID =-1224389198
  234336: * 3 Feb 18:53:39: ISAKMP: (5912): ask 1 spis of ipsec
  234337: * 3 Feb 18:53:39: ISAKMP: (5912): entrance, node-1224389198 = IKE_MESG_FROM_PEER, IKE_QM_EXCH
  234338: * 3 Feb 18:53:39: ISAKMP: (5912): former State = new State IKE_QM_READY = IKE_QM_SPI_STARVE
  234339: * 3 Feb 18:53:39: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
  234340: * 3 Feb 18:53:39: IPSEC (spi_response): spi getting 834762579 for SA
  of 95.6... to 93.73.161.229 for prot 3
  234341: * 3 Feb 18:53:39: crypto_engine: hash generate IKE
  234342: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IKE_HMAC (hw) (ipsec)
  234343: * 3 Feb 18:53:39: crypto_engine: create Security Association IPSec (by QM)
  routerindc #.
  234344: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IPSEC_KEY_CREATE (hw) (ipsec)
  234345: * 3 Feb 18:53:39: crypto_engine: create Security Association IPSec (by QM)
  234346: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IPSEC_KEY_CREATE (hw) (ipsec)
  234347: * 3 Feb 18:53:39: ISAKMP: (5912): establishing IPSec security associations
  234348: * 3 Feb 18:53:39: from 93.73.161.229 to 95.6 SA... (f / i) 0 / 0
  (93.73.161.229 to 95.6 proxy...)
  234349: * 3 Feb 18:53:39: spi 0x31C17753 and id_conn a 0
  234350: * 3 Feb 18:53:39: life of 28800 seconds
  234351: * 3 Feb 18:53:39: ITS 95.6 outgoing... to 93.73.161.229 (f / i) 0/0
  (proxy 95.6... to 93.73.161.229)
  234352: * 3 Feb 18:53:39: spi 0x495A4BD and id_conn a 0
  234353: * 3 Feb 18:53:39: life of 28800 seconds
  234354: * 3 Feb 18:53:39: crypto_engine: package to encrypt IKE
  234355: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IKE_ENCRYPT (hw) (ipsec)
  234356: * 3 Feb 18:53:39: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
  234357: * 3 Feb 18:53:39: map_db_find_best found no corresponding card
  234358: * 3 Feb 18:53:39: IPSec: rate allocated for brother 80000273 Flow_switching
  234359: * 3 Feb 18:53:39: IPSEC (policy_db_add_ident): 95.6..., src dest 93.73.161.229, dest_port 4500

  234360: * 3 Feb 18:53:39: IPSEC (create_sa): its created.
  (his) sa_dest = 95.6..., sa_proto = 50.
  sa_spi = 0x31C17753 (834762579).
  sa_trans = sa_conn_id of hmac-sha-esp, esp-3des = 1165
  234361: * 3 Feb 18:53:39: IPSEC (create_sa): its created.
  (his) sa_dest = 93.73.161.229, sa_proto = 50,.
  sa_spi = 0x495A4BD (76915901).
  sa_trans = sa_conn_id of hmac-sha-esp, esp-3des = 1166
  234362: * 3 Feb 18:53:39: ISAKMP: (5912): lot of 93.73.161.229 sending peer_port my_port 4500 4500 (R) QM_IDLE
  234363: * 3 Feb 18:53:39: ISAKMP: (5912): entrance, node-1224389198 = IKE_MESG_FROM_IPSEC, IKE_SPI_REPLY
  234364: * 3 Feb 18:53:39: ISAKMP: (5912): former State = new State IKE_QM_SPI_STARVE = IKE_QM_R_QM2
  234365: * 3 Feb 18:53:39: ISAKMP (0:5912): received 93.73.161.229 packet dport 4500 4500 Global (R) QM_IDLE sport
  234366: * 3 Feb 18:53:39: crypto_engine: package to decipher IKE
  234367: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IKE_DECRYPT (hw) (ipsec)
  234368: * 3 Feb 18:53:39: crypto_engine: hash generate IKE
  234369: * 3 Feb 18:53:39: CryptoEngine0: CRYPTO_ISA_IKE_HMAC (hw) (ipsec)
  routerindc #.
  234370: * 3 Feb 18:53:39: ISAKMP: (5912): node-1224389198 error suppression FALSE reason 'QM (wait).
  234371: * 3 Feb 18:53:39: ISAKMP: (5912): entrance, node-1224389198 = IKE_MESG_FROM_PEER, IKE_QM_EXCH
  234372: * 3 Feb 18:53:39: ISAKMP: (5912): former State = new State IKE_QM_R_QM2 = IKE_QM_PHASE2_COMPLETE
  234373: * 3 Feb 18:53:39: IPSEC (key_engine): had an event of the queue with 1 KMI message (s)
  234374: * 3 Feb 18:53:39: IPSEC (key_engine_enable_outbound): rec would notify of ISAKMP
  234375: * 3 Feb 18:53:39: IPSEC (key_engine_enable_outbound): select SA with spinnaker 76915901/50
  234376: * 3 Feb 18:53:40: IPSEC (epa_des_crypt): decrypted packet has no control of her identity
  routerindc #.
  234377: * 3 Feb 18:53:42: IPSEC (epa_des_crypt): decrypted packet has no control of her identity
  routerindc #.
  234378: * 3 Feb 18:53:44: IPSEC (epa_des_crypt): decrypted packet has no control of her identity

  Also when I connect with the phone, I see HIS Active and IPsec tunnel is mounted, but the wire of time tunnel is down and phone connects.

  I hope that you will help me. Thank you.

  Hi dvecherkin1,

  Who IOS you're running, you could hit the next default.

  https://Tools.Cisco.com/bugsearch/bug/CSCsg34166/?reffering_site=dumpcr

  It may be useful

  -Randy-

  Evaluate the ticket to help others find the answer quickly.

• BlackBerry smartphones can not install the Desktop software

  When I try to install Desktop Manager, the following error message will appear:

  

  Downloaded twice again, the same thing happens again. Tried this http://btsc.webapps.blackberry.com/btsc/search.do?cmd=displayKC&docType=kc&externalId=KB28396#resolu...  and installed all the root of the Web site of verisign certificates, still does not. Any help?

  Finally found a solution. The cause is, "VeriSign Class 3 Code signing CA" certificate is missing and is not in the link provided by RIM in "Knowledge Base" or the site Web of VeriSign (!)  but thanks to google I found this.

  Open your Notepad (or notepad ++)

  * Paste the following code:

  -----BEGIN CERTIFICATE-----
  MIIEwzCCBCygAwIBAgIQTWKQ5YxU8PHrFzQaExDmpDANBgkqhkiG9w0BAQUFADBf
  MQswCQYDVQQGEwJVUzEXMBUGA1UEChMOVmVyaVNpZ24sIEluYy4xNzA1BgNVBAsT
  LkNsYXNzIDMgUHVibGljIFByaW1hcnkgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkw
  HhcNMTAwOTMwMDAwMDAwWhcNMTQwMTAxMjM1OTU5WjCBtDELMAkGA1UEBhMCVVMx
  FzAVBgNVBAoTDlZlcmlTaWduLCBJbmMuMR8wHQYDVQQLExZWZXJpU2lnbiBUcnVz
  dCBOZXR3b3JrMTswOQYDVQQLEzJUZXJtcyBvZiB1c2UgYXQgaHR0cHM6Ly93d3cu
  dmVyaXNpZ24uY29tL3JwYSAoYykxMDEuMCwGA1UEAxMlVmVyaVNpZ24gQ2xhc3Mg
  MyBDb2RlIFNpZ25pbmcgMjAxMCBDQTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
  AQoCggEBAPUjS16l14q7MunUV/fv5Mcmfq0ZmP6onX2U9jZrENd1gTB/BGh/yyt1
  Hs0dCIzfaZSnN6Oce4DgmeHuN01fzjsU7obU0PUnNbwlCzinjGOdF6MIpauw+81q
  YoJM1SHaG9nx44Q7iipPhVuQAU/Jp3YQfycDfL6ufn3B3fkFvBtInGnnwKQ8PEEA
  Pt+W5cXklHHWVQHHACZKQDy1oSapDKdtgI6QJXvPvz8c6y+W+uWHd8a1VrJ6O1Qw
  UxvfYjT/HtH0WpMoheVMF05+W/2kk5l/383vpHXv7xX2R+f4GXLYLjQaprSnTH69
  u08MPVfxMNamNo7WgHbXGS6lzX40LYkCAwEAAaOCAaQwggGgMBIGA1UdEwEB/wQI
  MAYBAf8CAQAwcAYDVR0gBGkwZzBlBgtghkgBhvhFAQcXAzBWMCgGCCsGAQUFBwIB
  FhxodHRwczovL3d3dy52ZXJpc2lnbi5jb20vY3BzMCoGCCsGAQUFBwICMB4aHGh0
  dHBzOi8vd3d3LnZlcmlzaWduLmNvbS9ycGEwDgYDVR0PAQH/BAQDAgEGMG0GCCsG
  AQUFBwEMBGEwX6FdoFswWTBXMFUWCWltYWdlL2dpZjAhMB8wBwYFKw4DAhoEFI/l
  0xqGrI2Oa8PPgGrUSBgsexkuMCUWI2h0dHA6Ly9sb2dvLnZlcmlzaWduLmNvbS92
  c2xvZ28uZ2lmMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDAzAoBgNVHREE
  ITAfpB0wGzEZMBcGA1UEAxMQVmVyaVNpZ25NUEtJLTItODAdBgNVHQ4EFgQUz5mp
  6nsm9EvJjo/X8AUm7+PSp50wMQYDVR0fBCowKDAmoCSgIoYgaHR0cDovL2NybC52
  ZXJpc2lnbi5jb20vcGNhMy5jcmwwDQYJKoZIhvcNAQEFBQADgYEArt0hHV+PgHrS
  Ugnq227SXYvowhtpBL5RpQEOWfo30XSj7tztiXQrYtWmv0+tNhdU8BPgo0XSTCbL
  4m2iH9AeegcPtrN7b1Booukxs7eZfYBwoKfeCx6k//NNgRvdIMkcxK/P8Y/62dqV
  8OzcXL/ojFo+erCj61lDdBHgmxpq828=
  -----END CERTIFICATE-----
  

  * Save it with the name ' Code signing alternative intermediary 2010.cer.

  * Open Internet Explorer

  * Go to tools > Internet Options > content > certificates, click the 'intermediary' tab, press "Import" and select the certificate that you saved.

  After you import that, the installer should work now.

  Source: Microsoft Forums (check first)

• Is there a way to force the router to re-enroll with to take down the tunnel?

  Hi all

  I have the following configuration:

  Crypto pki trustpoint mycompany.com
  number of registration attempts 5
  retry registration period 3
  Enrollment url http://x.x.x.x:80
  Serial number no
  domain name full routername.mycompany.com
  IP address no
  password
  name of the object l = Denver, c = US
  revocation checking no
  automatic registration of the 70s

  Scenario of

  If the certificate has already reached 70 percent of his time of life and the router has already tried 5 times to get a new failure.

  1. is there a way to know how many times the router tried to re-enroll?

  2. is there a way to force the router to re-register without down tunnels?

  3. If the router has already tried, I can increase auto-enrollment to 90 - would this work?

  Thank you very much in advance for your answers.

  See you soon!

  mguzman4158:

  Question 1

  The following command output may indicate failures of re-registration after that as they occur.

  HQ-edg01 #sh crypto pki timers

  PKI timers
  |  1:59:35.732 2D
  |  2D 1:59:35.732 CRL cannot display the COP
  | 353d 8:31:22.880 SURVIVOR CA.domain.null

  Question 2

  This chapter: setting up registration of certificate for a public key infrastructure

  http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_cert_enroll_pki.PDF

  ... and this chapter: set up and manage a server of Cisco IOS for the deployment of public key infrastructure certificates

  http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_cfg_mng_cert_serv.PDF

  ... from this Book: Guide of the Cisco IOS Security Configuration: connectivity secure, release 12.4 T

  http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/12_4t/sec_secure_connectivity_12_4t_book.PDF

  .. could help.

  Question 3

  In my opinion, I think that you would be able to revive the reinstatement at a later date by incrementing the percentage argument.

  Best regards
  Mike