Submit a ticketCall us

whitepaperYour VM Perplexities Called, and They Need You to Read This.

Virtualization can give you enormous flexibility with future workloads and can be a key enabler for other areas, like cloud computing and disaster recovery. So, how can you get a handle on the performance challenges in your virtual environment and manage deployments without erasing the potential upside? Learn the four key areas you need to be focusing on to help deliver a healthy and well-performing data center.

Get your free white paper.

Home > Success Center > Patch Manager > Patch Manager - Knowledgebase Articles > Schannel errors several times a minute on Patch Manager managed clients

Schannel errors several times a minute on Patch Manager managed clients

Updated May 15, 2018


You have successfully installed Patch Manager and deployed Patch Manager agents, but the default GPO does not trust the Eminentware CA cert and returns Schannel errors every minute in the Windows security event log.


  • Patch Manager 2.x
  • Patch Manager Agents


  • Error:  Schannel certificate Error 3688* 


  • The EminentWare CA and/Or EminentWare Agent cert is not in the Trusted Root CA
  • The Agent is no longer listed under the agents tab in the Patch Manager Server


EminentWare CA And EminentWare Agent Certs are located in the Trusted Root CA Store on all Nodes with an installed Agent (not just the client components).


  1. Confirm that both certificates are valid and present in the Trusted Root CA Store
  2. Check the Agent bucket on the Patch Manager Server
    1. Agents.png
  3. If the Agents are no longer listed please uninstall or reinstall the Agent if needed to recreate the certificate. 
    1. agents2.png







Last modified