BugCheck,STOP:0x0000000A(0x00000000,0xD000001F,0x00000000,0xE065B523)

[Mandar1979]

One of our ProLiant DL580 G3, rebooted unexpected with BugCheck,STOP:0x0000000A(0x00000000,0xD000001F,0x00000000,0xE065B523)

ASR Detected by System ROM and hence we could not get the memory dump file created.
We also had number of following warning events
Event Type: Warning
Event Source: NfsSvr
Event Category: None
Event ID: 1021
Date: 2/2/2009
Time: 4:02:01 AM
User: N/A
Computer: xxxxx01
Description:
There was a mapping failure.

Event Type: Error
Event Source: crypt32
Event Category: None
Event ID: 8
Date: 2/20/2009
Time: 12:47:51 PM
User: N/A
Computer: xxxxx01
Description:
Failed auto update retrieval of third-party root list sequence number from:

<> with error: This operation returned because the timeout period expired.

With the above information can anyone suggest what could be the reason for the server reboot un-expected.

[KarloChacon]

I some times think people should mention what they have done first since for these errors I usually google them so maybe you already googled it and found this


http://support.microsoft.com/kb/836049

http://support.microsoft.com/kb/910835

is everything up to date?
proliant support pack?
firmwate CD?

[Mandar1979]

Every thing on the server was upto date, inclding PSP verion, BIOS, Antivirus etc.
No such activity was recorded on the server.

One thing we noticed was /3GB and /PAE switch enabled.
nfssvr.sys on the server
File Version 8.0.2254.1

Number of failure audit
Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 537
Date: 2/20/2009
Time: 11:53:10 AM
User: NT AUTHORITY\SYSTEM
Computer: XXXXXXX
Description:
Logon Failure:
Reason: An error occurred during logon
User Name:
Domain:
Logon Type: 3
Logon Process: SFU NFS
Authentication Package: Kerberos
Workstation Name: XXXXXXX
Status code: 0xC000018B
Substatus code: 0x0
Caller User Name: XXXXXXX$
Caller Domain: HA
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 4
Transited Services: -
Source Network Address: -
Source Port: -
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Failure Audit
Event Source: Security
Event Category: Logon/Logoff
Event ID: 535
Date: 2/20/2009
Time: 11:53:10 AM
User: NT AUTHORITY\SYSTEM
Computer: XXX
Description:
Logon Failure:
Reason: The specified account's password has expired
User Name: xxxxxxx
Domain: XXX
Logon Type: 3
Logon Process: SFU NFS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name:
Caller User Name: xxxxx$
Caller Domain: HA
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 4
Transited Services: -
Source Network Address: -
Source Port: -


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.