logo
Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error

Options
Go to last post Go to first unread
Offline Lemonde  
#1 Posted : 24 December 2020 11:00:45(UTC)
Lemonde

Rank: Advanced Member

Groups: Registered
Joined: 08/01/2017(UTC)
Posts: 672
United Kingdom
Location: London

Thanks: 17 times
Was thanked: 6 time(s) in 6 post(s)
Upon restarting the certserv we see:

Log Name: Application
Source: Microsoft-Windows-CertificationAuthority
Date: 24/12/2020 10:57:35
Event ID: 134
Task Category: None
Level: Information
Keywords:
User: SYSTEM
Computer: 00DC0.domain.local
Description:
A certificate in the chain for CA certificate 0 for domain-00-XAB-CA has expired. A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. 0x800b0101 (-2146762495 CERT_E_EXPIRED).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CertificationAuthority" Guid="{6a71d062-9afe-4f35-ad08-52134f85dfb9}" />
<EventID>134</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2020-12-24T10:57:35.678450400Z" />
<EventRecordID>4677</EventRecordID>
<Correlation />
<Execution ProcessID="9848" ThreadID="4020" />
<Channel>Application</Channel>
<Computer>00DC0.domain.local</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData Name="MSG_I_CA_CERT_EXPIRED">
<Data Name="CACommonName">domain-00-XAB-CA</Data>
<Data Name="ErrorCode">A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. 0x800b0101 (-2146762495 CERT_E_EXPIRED)</Data>
<Data Name="CACertIdentifier">0</Data>
</EventData>
</Event>

Is this causing an issue with revocation?
Sponsor

If you ever wanted to thank us, you can send us Bitcoins using:

12G4A52Znm5s35buKDEmKU2p2vQY69Nsyo

All opinions expressed within these pages are sent in by members of the public or by our staff in their spare time, and as such do not represent any opinion held by sircles.net Ltd or their partners.

Offline Lemonde  
#2 Posted : 13 January 2021 03:13:39(UTC)
Lemonde

Rank: Advanced Member

Groups: Registered
Joined: 08/01/2017(UTC)
Posts: 672
United Kingdom
Location: London

Thanks: 17 times
Was thanked: 6 time(s) in 6 post(s)
I had to renew the root CA certificate which was simply done by right clicking the server in the domain certificate services MMC snap-in and choosing ‘renew root CA certificate.’
Users browsing this topic
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.