Schannel 36880 event ID field information

[Chaitanya Chandake]

I have a doubt in understanding event ID 36880. I am not generating this event but needed this information.
A TLS [Client or Server] handshake completed successfully. The negotiated cryptographic parameters are as follows.
Various parameters are listed which includes Local certificate Subject name and Remote certificate subject Name.
Depending on the context
A TLS Client handshake completed successfully

• Local certificate subject name stands for certificate subject of Client and Remote certificate subject Name stands for certificate subject of Server.

A TLS Server handshake completed successfully

• Local certificate subject name stands for certificate of Server and Remote certificate subject Name stands for certificate of Client.

Let me know if whatever understood is right.



Continue reading...