question

57283445 avatar image
0 Votes"
57283445 asked LeilaKong-MSFT answered

KMS server activation office error 10013

when activating office 2016 using the kms server, you get an error - A security error has occurred.
On the workstation where you need to activate Office 2016, there is an error 36871 in the system logs with an internal state of 10013

Имя журнала: System
Источник: Schannel
Дата: 11.05.2022 7:12:33
Код события: 36871
Категория задачи:Отсутствует
Уровень: Ошибка
Ключевые слова:
Пользователь: СИСТЕМА
Компьютер: comp01
Описание:
Произошла неустранимая ошибка при создании учетных данных TLS client. Внутреннее состояние ошибки: 10013.
Xml события:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">;
<System>
<Provider Name="Schannel" Guid="{1f678132-5938-4686-9fdc-c8ff68f15c85}" />
<EventID>36871</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2022-05-11T04:12:33.7351039Z" />
<EventRecordID>9239</EventRecordID>
<Correlation ActivityID="{697ba5d6-6446-0001-06a7-7b694664d801}" />
<Execution ProcessID="848" ThreadID="7436" />
<Channel>System</Channel>
<Computer>comp01</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="Type">client</Data>
<Data Name="ErrorState">10013</Data>
</EventData>
</Event>

on the workstation did what is advised in this article https://stackoverflow.com/questions/53121859/a-fatal-error-occurred-while-creating-a-tls-client-credential-the-internal-erro

changes in the registry did not help, error 10013 remained

windows-serverwindows-10-security
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LeilaKong-MSFT avatar image
0 Votes"
LeilaKong-MSFT answered

Hello @57283445 ,

Thanks for your query.

It seems a .Net Framework issue and about configuring .Net that you need.

For any version of .Net 4, registry change need be:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft.NETFramework\v4.0.30319]
"SystemDefaultTlsVersions"=dword:00000001

While for earlier versions of .Net it is:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft.NETFramework\v2.0.50727]
"SystemDefaultTlsVersions"=dword:00000001

The registry change enables TLS 1.2 for .Net

FYI:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/fd626e47-9ee7-41c5-b11a-ae696e3b6b5b/a-fatal-error-occurred-while-creating-a-tls-client-credential-the-internal-error-state-is-10013?forum=ws2016
https://www.alfintechcomputer.com/a-fatal-error-occurred-while-creating-a-tls-client-credential-the-internal-error-state-is-10013/


Best regards,
Leila


If the Answer is helpful, please click "Accept Answer" and upvote it.


5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.