|Issue||Windows Eventing Collector cannot collect Windows log from Windows Server 2008 computer|
|Cause||3DES and RC4 are disabled on event source|
Windows Eventing Collector supports the following cipher suites:
The error can occur if the following are disabled; RC4 128/128 and Triple DES 168 cipher, on a Windows 2008 event source.
For more information, please refer to http://support.microsoft.com/kb/245030 (the registry keys can apply to Windows 2008)
Users have encountered this same error if using a certificate with Microsoft Strong Cryptographic Provider.
In this case, the issue was resolved after changing the CSP to Microsoft RSA Schannel Cryptographic Provider.
|Legacy Article ID||a57114|