asked on

Expired / Invalid exchange certificates

checking on one of our sbs servers (sbs 2008, exchange 2007), I can see some invalid certificates, they are also out of date.

How can I find out their use?

they are self signed, and i always seem to run into issues renewing them. what is the correct way of renewing them?

SOLUTION

Abbas Haidar

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

WORKS2011

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Neal58

ASKER

absi81 - i get this error when running the internet address management wizard:

Description:
Stopped working

Problem signature:
Problem Event Name:      CLR20r3
Problem Signature 01:      dpcw.exe
Problem Signature 02:      6.0.5601.8524
Problem Signature 03:      4bb3c519
Problem Signature 04:      mscorlib
Problem Signature 05:      2.0.0.0
Problem Signature 06:      4e154615
Problem Signature 07:      20c7
Problem Signature 08:      143
Problem Signature 09:      N3CTRYE2KN3C34SGL4ZQYRBFTE4M13NB
OS Version:      6.0.6002.2.2.0.305.9
Locale ID:      2057

Read our privacy statement:
http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

WORKS2011 - normally that is how i would do it, but last time i did that on this server i mucked all the certificates up . . .

WORKS2011

what happens when you run the "Fix My Network" wizard?

WORKS2011

The Domain Purchase and Configuration Wizard (dpcw.exe) can crash if DNS is having problems run dcdiag /test:dns and report the results.

Neal58

ASKER

Fix My Network wizard:

Could not configure the router
DNS is using a DNS Forwarder
Exchange SMTP connectors are invalid
A networking component is not configured properly. (Component ID 3)
A networking component is not configured properly. (Component ID 4)

(havent clicked to fix these yet)

dcdiag /test:dns:

Directory Server Diagnosis

Performing initial setup:
Trying to find home server...
Home Server = SERVER
* Identified AD Forest.
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Name\SERVER
Starting test: Connectivity
......................... SERVER passed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Name\SERVER

Starting test: DNS

DNS Tests are running and not hung. Please wait a few minutes...
......................... SERVER passed test DNS

Running partition tests on : ForestDnsZones

Running partition tests on : DomainDnsZones

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : domain

Running enterprise tests on : domain.local
Starting test: DNS
Test results for domain controllers:

DC: SERVER.domain.local
Domain: domain.local

TEST: Basic (Basc)
Warning: The AAAA record for this DC was not found

TEST: Dynamic update (Dyn)
Warning: Failed to add the test record _dcdiag_test_record in
zone domain.local

TEST: Records registration (RReg)
Network Adapter
[00000006] Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Clien
t):

Warning:
Missing AAAA record at DNS server 192.168.0.200:
SERVER.domain.local

Warning:
Missing AAAA record at DNS server 192.168.0.200:
gc._msdcs.domain.local

Warning: Record Registrations not found in some network adapters

SERVER PASS WARN PASS PASS WARN WARN n/a
......................... domain.local passed test DNS

ASKER CERTIFIED SOLUTION

WORKS2011

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial