Schannel Errors - Event ID 36871 on sync server

[jon797w]

We are seeing hundreds of Schannel Errors - Event ID 36871 A fatal error occurred while creating a TLS client credential. The internal error state is 10013. The SSPI client process is SYSTEM (PID: 4). in our System Event log, this mainly occurs on the sync server.

Have used IISCrypto to secure the server and only TLS1.2/1.3 are enabled

Anyone else seen this issue and found a solution?

[DavidPK]

Hi Jon,

• Error state 10013 typically indicates that a system-level process is trying to initiate a TLS connection, but cannot because of a mismatch between required protocols and what’s enabled.
• PID 4 refers to the SYSTEM process, meaning this could be tied to Windows services like LSASS, HTTP.sys, or scheduled tasks that attempt connections under the hood.
  These errors don't always point to a functional issue but generally result from deprecated protocols being unavailable.

If the issue is non-disruptive and doesn’t appear to affect functionality, it may simply be logged noise due to deprecated system calls. However, if it's impacting Lansweeper or other service operations, this will need deeper analysis.

If so you can contact Lansweeper support:

Our tech support team should be able to assist you with this.  Please open a ticket in our support portal.

Make sure to add screenshots and the GatherLogs output file so our SME's can start investigating the issue straight away. 

Using the GatherLogs tool.