Submit a ticketCall us

AnnouncementsAre You “Flying Blind?”

When it comes to your complex IT infrastructure, you want to ensure you have a good grasp of what’s going on to avoid any fire drills that result from guesswork. Read our white paper to learn how proactively monitoring your IT environment can help your organization while giving you peace of mind.

Get your free white paper.

Home > Success Center > Network Performance Monitor (NPM) > NPM - Knowledgebase Articles > The security context token is expired Intermittent Error

The security context token is expired Intermittent Error

Created by Harry Griffiths, last modified by MindTouch on Jun 23, 2016

Views: 2,183 Votes: 1 Revisions: 9


You find that sometimes or consistently on an Orion polling engine, you run into some error messages when performing day to day tasks such as edit node or add node.


Message: An unsecured or incorrectly secured fault was received from the other party.
See the inner FaultException for the fault code and detail.
ErrorSite: mscorlib.RealProxy.HandleReturnMessage
ErrorType: System.ServiceModel.Security.MessageSecurityException




System.ServiceModel.Security.MessageSecurityException: An unsecured or incorrectly secured
fault was received from the other party. See the inner FaultException for the fault code
  and detail. ---> System.ServiceModel.FaultException: The security context token is
   expired or is not valid. The message was not processed.


Upon inspection of the windows event logs, you find the following events in windows event viewer.


Event ID - 36885
Event text - When asking for client authentication, this server sends a list of
trusted certificate authorities to the client. The client uses this list to choose a client
certificate that is trusted by the server. Currently,
this server trusts so many certificate authorities that the list has grown too long. This
list has thus been truncated. The administrator of this machine should review the certificate
authorities trusted for client authentication and remove those that do not really need to be
System - Schannel

Event ID - 36887
Event text - The following fatal alert was received: 47
System - Schannel


All products using Orion Core Platform


This issue can be due to the certificate store on the polling engines.


This specific windows error, comes when there can be too many certificates. Find the following screenshot to visualize how a clean install of NPM 11.5.3 on clean OS build can look.


If you find you have a lot more on your polling engine, then you must work with your system administrators to find out what other 3rd-party applications or potentially use these. Note: Solarwinds is  not responsible for this. This issue seems to be a Microsoft issue (MS error about too many certificates).


The purpose of this article is to assist with identifying what can cause our application to not work properly.



  1. Open MMC, Click file > Add/remove snap-ins > Certificates > Add > Computer Account > Next > Local computer > OK.
  2. Expand Certificates > Trusted Root Certification Authorities
  3. Work with your server administrators to remove needless \ expired certificates.
    *** Warning: Export any certificate you are going to delete ***
  4. Right Click > All Tasks > Export.


Last modified