An application or service that calls the InitializeSecurityContext function together with the ISC_REQ_EXTENDED_ERROR flag may encounter a TLS/SSL negotiation failure on a computer that is running Windows Server 2008 R2 or Windows 7

Article translations Article translations
Article ID: 975858 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS


Consider the following scenario:
  • An application or a service calls the InitializeSecurityContext function together with the ISC_REQ_EXTENDED_ERROR flag on a computer that is running Windows Server 2008 R2 or Windows 7.
  • The application or service relies on the returned attribute ISC_RET_EXTENDED_ERROR flag.
In this scenario, the application or service may encounter a function failure or an exception.

For example, a Transport Layer Security (TLS) negotiation fails when Microsoft Office Communicator Server 2007 R2 is installed on a computer that is running Windows Server 2008 R2. This problem causes some functions not to work in Office Communicator Server 2007 R2.

CAUSE

This problem occurs because the returned attribute flags that are from the InitializeSecurityContext function do not contain the ISC_RET_EXTENDED_ERROR flag. The application relies on the returned ISC_RET_EXTENDED_ERROR flag. Therefore, a function failure or exception occurs.

RESOLUTION

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:
http://support.microsoft.com/contactus/?ws=support
Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, the computer must be running one of the following operating systems:
  • Windows Server 2008 R2
  • Windows 7

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfix.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
Windows Server 2008 R2 and Windows 7 file information note

The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files (attributes not listed) are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008 R2 or Windows 7
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Schannel.dll6.1.7600.20719220,67226-May-201010:48x86

For all supported x64-based versions of Windows Server 2008 R2 or Windows 7
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Schannel.dll6.1.7600.20719344,06426-May-201011:32x64
Schannel.dll6.1.7600.20719220,67226-May-201010:48x86

For all supported Itanium-based versions of Windows Server 2008 R2
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Schannel.dll6.1.7600.20719635,90426-May-201010:12IA-64
Schannel.dll6.1.7600.20719220,67226-May-201010:48x86

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

MORE INFORMATION

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:
824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information for Windows Server 2008 R2 and for Windows 7

Additional files for all supported x86-based versions of Windows Server 2008 R2 and for Windows 7


Collapse this tableExpand this table
File namePackage_1_for_kb975858~31bf3856ad364e35~x86~~6.1.2.0.mum
File versionNot Applicable
File size1,823
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_2_for_kb975858~31bf3856ad364e35~x86~~6.1.2.0.mum
File versionNot Applicable
File size1,828
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_3_for_kb975858~31bf3856ad364e35~x86~~6.1.2.0.mum
File versionNot Applicable
File size1,808
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_for_kb975858_rtm~31bf3856ad364e35~x86~~6.1.2.0.mum
File versionNot Applicable
File size2,421
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameX86_05c5e4e6a9fcbf8dba80ed919cc639d2_31bf3856ad364e35_6.1.7600.20719_none_dd9644724bccbce3.manifest
File versionNot Applicable
File size705
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameX86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.20719_none_22c5f44acf77a536.manifest
File versionNot Applicable
File size12,919
Date (UTC)26-May-2010
Time (UTC)11:27
PlatformNot Applicable

Additional files for all supported x64-based versions of Windows Server 2008 R2 and of Windows 7


Collapse this tableExpand this table
File nameAmd64_0b179317b6aa5a2d9b134f3e99700c7c_31bf3856ad364e35_6.1.7600.20719_none_e5aceaf94aa6c3af.manifest
File versionNot Applicable
File size709
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameAmd64_dd8024aebb1cbb30550b2bb6319b7bd9_31bf3856ad364e35_6.1.7600.20719_none_a8ef1a0a88822022.manifest
File versionNot Applicable
File size1,060
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameAmd64_df2ddc17684dd14436facdef7267c511_31bf3856ad364e35_6.1.7600.20719_none_db02d0ac564a5764.manifest
File versionNot Applicable
File size709
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameAmd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.20719_none_7ee48fce87d5166c.manifest
File versionNot Applicable
File size12,921
Date (UTC)26-May-2010
Time (UTC)12:45
PlatformNot Applicable
File namePackage_1_for_kb975858~31bf3856ad364e35~amd64~~6.1.2.0.mum
File versionNot Applicable
File size1,833
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_2_for_kb975858~31bf3856ad364e35~amd64~~6.1.2.0.mum
File versionNot Applicable
File size2,260
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_3_for_kb975858~31bf3856ad364e35~amd64~~6.1.2.0.mum
File versionNot Applicable
File size2,060
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_4_for_kb975858~31bf3856ad364e35~amd64~~6.1.2.0.mum
File versionNot Applicable
File size2,043
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_for_kb975858_rtm~31bf3856ad364e35~amd64~~6.1.2.0.mum
File versionNot Applicable
File size3,357
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameWow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.20719_none_89393a20bc35d867.manifest
File versionNot Applicable
File size6,945
Date (UTC)26-May-2010
Time (UTC)11:18
PlatformNot Applicable

Additional files for all supported Itanium-based versions of Windows Server 2008 R2


Collapse this tableExpand this table
File nameIa64_3e165e55531fef3d04f106c261cc14ae_31bf3856ad364e35_6.1.7600.20719_none_edba930183a67ef6.manifest
File versionNot Applicable
File size707
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameIa64_df2ddc17684dd14436facdef7267c511_31bf3856ad364e35_6.1.7600.20719_none_7ee5d91e9deaef2a.manifest
File versionNot Applicable
File size708
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameIa64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.20719_none_22c79840cf75ae32.manifest
File versionNot Applicable
File size12,920
Date (UTC)26-May-2010
Time (UTC)12:50
PlatformNot Applicable
File namePackage_1_for_kb975858~31bf3856ad364e35~ia64~~6.1.2.0.mum
File versionNot Applicable
File size1,834
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_2_for_kb975858~31bf3856ad364e35~ia64~~6.1.2.0.mum
File versionNot Applicable
File size2,054
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File namePackage_for_kb975858_rtm~31bf3856ad364e35~ia64~~6.1.2.0.mum
File versionNot Applicable
File size1,958
Date (UTC)26-May-2010
Time (UTC)14:54
PlatformNot Applicable
File nameWow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7600.20719_none_89393a20bc35d867.manifest
File versionNot Applicable
File size6,945
Date (UTC)26-May-2010
Time (UTC)11:18
PlatformNot Applicable

REFERENCES

For more information about the InitializeSecurityContext (Schannel) function, visit the following Microsoft Web site:
http://msdn.microsoft.com/en-us/library/aa375924(VS.85).aspx

For more information about the supportability for Office Communications Server 2007 R2 member server role, click the following article number to view the article in the Microsoft Knowledge Base:
982021 Supportability is available for Office Communications Server 2007 R2 member server role on a Windows Server 2008 R2 operating system

Properties

Article ID: 975858 - Last Review: October 9, 2011 - Revision: 3.0
APPLIES TO
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Windows 7 Enterprise
  • Windows 7 Home Basic
  • Windows 7 Home Premium
  • Windows 7 Professional
  • Windows 7 Starter
  • Windows 7 Ultimate
Keywords: 
kbqfe kbhotfixserver kbsurveynew kbautohotfix kbexpertiseinter kbbug kbfix KB975858

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com