board logo
Posted by: Lemonde - 24 December 2020 11:00:45
Upon restarting the certserv we see: Log Name: Application Source: Microsoft-Windows-CertificationAuthority Date: 24/12/2020 10:57:35 Event ID: 134 Task Category: None Level: Information Keywords: User: SYSTEM Computer: 00DC0.domain.local Description: A certificate in the chain for CA certificate 0 for domain-00-XAB-CA has expired. A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. 0x800b0101 (-2146762495 CERT_E_EXPIRED). Event Xml: [code=markup]<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-CertificationAuthority" Guid="{6a71d062-9afe-4f35-ad08-52134f85dfb9}" /> <EventID>134</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x8000000000000000</Keywords> <TimeCreated SystemTime="2020-12-24T10:57:35.678450400Z" /> <EventRecordID>4677</EventRecordID> <Correlation /> <Execution ProcessID="9848" ThreadID="4020" /> <Channel>Application</Channel> <Computer>00DC0.domain.local</Computer> <Security UserID="S-1-5-18" /> </System> <EventData Name="MSG_I_CA_CERT_EXPIRED"> <Data Name="CACommonName">domain-00-XAB-CA</Data> <Data Name="ErrorCode">A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. 0x800b0101 (-2146762495 CERT_E_EXPIRED)</Data> <Data Name="CACertIdentifier">0</Data> </EventData> </Event> [/code] Is this causing an issue with revocation?

Posted by: Lemonde - 13 January 2021 03:13:39
I had to renew the root CA certificate which was simply done by right clicking the server in the domain certificate services MMC snap-in and choosing ‘renew root CA certificate.’