[Event ID : 36887] - A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40.

2016-12-07

Question

_{Wednesday, December 7, 2016 8:54 AM}

we have a W2k12 server with dc, print and file server role.

I was checking the event logs to figure out an audit issue, however i have found continues event id 36887 in system logs.

"A fatal alert was received from the remote endpoint. The TLS protocol defined fatal alert code is 40"

As further investigated, we have found that issue is related to TLS.

tried the provided solutiuon from below

https://answers.microsoft.com/en-us/windows/forum/windows8_1-performance/schannel-event-id-36887-tls-fatal-alert-code-40/63a19616-3197-4545-9e3a-a9e9742cb2fc

All replies (2)

_{Thursday, December 8, 2016 7:56 AM}

Hi,

According to the error, it means handshake_failure, indicates that the sender was unable to negotiate an acceptable set of security parameters given the options available. This is a fatal error.

SSL/TLS Alert Protocol & the Alert Codes

http://blogs.msdn.com/b/kaushal/archive/2012/10/06/ssl-tls-alert-protocol-amp-the-alert-codes.aspx

Similar thread for your reference:

https://community.spiceworks.com/topic/401868-schannel-fatal-alert-40-what-is-going-on

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best Regards,

Alvin Wang

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].

_{Friday, December 16, 2016 4:34 AM}

Hi,

Just checking in to see if the information provided was helpful. Please let us know if you would like further assistance.