Event ID 36888 - Schannel - A fatal alert was generated and sent to the remote endpoint.

Question

Exchange 2013:  2 x multi-role in one DAG - on-premise
Performing remote mailbox migration using internet (*non-exchange web-based  tool*), to ship data from cloud Ex2010 server to Ex013 on-premise.
Have multiple failures when doing the mailbox data copy - my migration tool error code tells me that:
This error indicates that we were unable to authenticate to the source or destination mailbox and retrieve a list of folders when given 15
minutes to complete these operations. This may be because the source or destination is unusually slow, has a very large number of folders, or due to "hanging" networking calls.
Some mailboxes are copying, but around 80% are not.  Checked all permissions and other factors.
I see in the System event log the following below:
Log Name:      System
Source:        Schannel
Date:          9/14/2013 2:14:53 PM
Event ID:      36888
Task Category: None
Level:         Error
Keywords:      
User:          SYSTEM
Computer:      server.domain.local
Description:
A fatal alert was generated and sent to the remote endpoint. This may result in termination of the connection. The TLS protocol defined fatal error code is 10. The Windows SChannel error state is 1203.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Schannel" Guid="{1F678132-5938-4686-9FDC-C8FF68F15C85}" />
    <EventID>36888</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-09-14T20:14:53.699840000Z" />
    <EventRecordID>135625</EventRecordID>
    <Correlation />
    <Execution ProcessID="544" ThreadID="17928" />
    <Channel>System</Channel>
    <Computer>server.domain.local</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="AlertDesc">10</Data>
    <Data Name="ErrorState">1203</Data>
  </EventData>
</Event>
Anyone seen this? - not much recording this error available for Ex2013.

Answer 1

Hello,
Thank you for your post.
This is a quick note to let you know that we are performing research on this issue.
If you have feedback for TechNet Subscriber Support, contact
[email protected]
Simon Wu
TechNet Community Support
Hi Simon
I opened a SEV B case  today.  Appears to directly reflect the amount of load i put through, in terms of data being shipped with our migration tool.  That tool is basically logging into each mailbox using a superuser account and populating
it with mail and calendar data form a source cloud mailbox.  No fancy co-existence or online move requests.
All throttle policies are removed.  Attempting to migrate more than 20 mailboxes at a time results in the System Event log being filled with the Schannel error above.  Reducing the amount below this still shows the errors appearing, but not enough
to stop mailbox data being shipped and the migration tool suffering a stop error.
I will update the thread tomorrow when i speak with the engineer.  Surprised noone has had any input so far.
I have the same problem, here is some data. I have two exchange profiles and the 2nd one stops logging in after this error starts. I have to reset the wireless connection and restart outlook to clear the situation.
Dave Ladouceur