Schannel error, Event ID 36888? - IS there a way to Identify what causes Schannel to log error?

Hi, I hope this is the correct forum for this problem,

I am seeing a few of these errors (error details below) sporadically throughout the system event log on a windows 2008 R2 server. I have seen a number of threads about SChannel errors

http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/thread/92c63737-c2a3-41f7-8878-3b0cf5ee95ff/

 http://social.technet.microsoft.com/Forums/en-US/windowsserver2008r2general/thread/4b505150-c709-45a2-b9f3-abc7c9988d6a

http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/thread/80b1ceee-9835-4f78-af0f-5b00a8964f34

However I can find no clear way of trying to find what exactly causing the error. It would appear that the Schannel is logging errors but that this errors are being caused by other processes. Now I know that this is obviously SSL/TLS related. So my question/s are this.

What exactly is Schannel and what does it do?

How do you identify the actual problem.?

I list the error details below, the pid refereced in the error is the lssas.exe which I believe deals with authentication. Is there anyway to trace what is actually causing the issue?

For reference the PID 604 noted below is lsasss.exe

The General error is
    The following fatal alert was generated: 10. The internal error state is 1203.

The Details are

- System

  - Provider

   [ Name]  Schannel
   [ Guid]  {1F678132-5938-4686-9FDC-C8FF68F15C85}
 
   EventID 36888
 
   Version 0
 
   Level 2
 
   Task 0
 
   Opcode 0
 
   Keywords 0x8000000000000000
 
  - TimeCreated

   [ SystemTime]  2010-06-18T04:51:41.830028400Z
 
   EventRecordID 10087
 
   Correlation
 
  - Execution

   [ ProcessID]  604
   [ ThreadID]  3828
 
   Channel System
 
   Computer<ComputernameRemoved>
 
  - Security

   [ UserID]  S-1-5-18
 

- EventData

  AlertDesc 10
  ErrorState 1203