Okay so this morning I began getting these messages in my event viewer after my PC decided to update to April update.
They seem to happen after reboot and boot up.
Also trying to updated Defender definitions is kinda not happening. I even tried through cmd line and it said no updates were necessary, even though the definitions did update according to Microsoft.com
Last edited by Redbatman; 01 May 2018 at 12:33.
I have the same Event ID 5061 in the Windows Logs/Security section of Event Viewer. It's an XBox Live certificate.
XBL Client Ipsec Issuing CA
For some reason this Event ID was moved to the Security section. Previously it would show as an Event ID 64 in the Application section of the Event Viewer.
You can verify this by running: certutil –store my
from the command prompt.
This is what I got by doing it
Serial Number: d49c11c6a8d97643a55b5eddd9a4e94a
Issuer: CN=XBL Client IPsec Issuing CA
NotBefore: 1/2/2018 10:20 AM
NotAfter: 1/3/2018 10:20 AM
Subject: CN=F9007479FC031D7A
Non-root Certificate
Cert Hash(sha1): cb1e5291b2e04c32b8651684f5f9fd4de010c775
Key Container = 11F88326-2132-4D64-9956-EB77B5003DC6
Unique container name: 2b1270ead2983daf54828e3f6773802a_bfd23135-ab1a-4702-9757-7ea9f71be682
Provider = Microsoft Software Key Storage Provider
Private key is NOT exportable
Encryption test passed
CertUtil: -store command completed successfully.
Should I reset the app then?
Last edited by Redbatman; 01 May 2018 at 13:43.
Exact same as mine.
Nothing really to do. If you use an XBox live game (or update it in any way) it will update the cert. If not, it's nothing to really worry about and won't cause any issues.
I am also getting this auditing error after upgrading to 1803, one after rebooting. I think I got one or two also a while after rebooting yesterday but today I only seen the one after rebooting or starting the laptop.
Searching the internet yesterday, I saw old posts from people mentioning Nvidia Driver but I dont think I have anything Nvidia in this laptop. Doing a search for Nvidia brings nothing. My error message is identical to the one posted by Redbatman, same number, mentions the certificate, etc.
Yesterday when I searched Google for the error and W10 1803, I found nothing. I am glad and thank you guys who reported getting 5061, now I know I am not alone. I was gonna report it in a few days if I didnt hear nothing about it. I dont use Xbox or play games and the error doesn't seem to affect the computer in anyway. I reckon this is one of those events we can safely ignore.
Bo
If I remeber correctly ... You should be able to delete the expired certificate ... XBL Client IPsec Issuing CA ... and that should get rid of that error.
Right Click Start > Run > Type in mmc and hit enter
When the Console opens Click File > Add/Remove Snap In
On the left choose Certificates > Click Add
Select Computer Account > Click Next
Local Computer should already be selected > Click Finish > Click Ok
On the left > Certificates > Trusted Root Certification Authorities > Certificates
On the right > Look for the expired XBL Client IPsec Issuing CA by the date in Event Viewer> Right Click > Delete
Close mmc without saving when asked
Note: You may have more than one XBL Client IPsec Issuing CA (I currently have 2 that expire 9-20-2028) ... so make sure you deleted the right one.
Hmm sounds like it's best to wait and have Microsoft update the app?
Quote