troubleshooting Question

Lotus Notes User's Recertified Certificate keeps expiring

Avatar of AVIVOL
AVIVOLFlag for Australia asked on
Lotus IBM
4 Comments1 Solution2347 ViewsLast Modified:
We have a staff member whose Notes ID certificate is repeatedly saying it is expiring each day.  I can recertify the certificate every morning, and for the day it works fine.  On the client I can check the expiry date after recertification for the ID and it is correct (two years remaining).  On the servers (we have three), the staff member's certificate expiry is also appearing correctly.

Today the certificate has finally expired.  Interestingly, when logging into Notes and checking the expiry date prior to opening a DB it showed that it had two years before expiry.  However as soon as I tried to open a server-based database the error "certificate expired" appeared, and subsequently checking the expiry on the client shows that it has simply expired.

I initially thought that the server is over-riding the local certificate's expiry date.  In other words, I thought recertifying the certificate would update the local ID file but not the server address book, however it is not the case.  Also, the servers appear to be replicating the certification expiry details correctly and this has been checked on all three of our servers.  Finally, as the replication occurs frequently during the day its odd that a replication problem would be the case as the error appears overnight, and not after a sheduled server replication.

I'm at a loss as to why this is occurring.  I did recreate the staff member's account to only have the old expiry issue reoccur the following day.  Hence why I believe the issue revolves around a value stuck on the server's address book in one of the replicas.

Note - I have tried recertification on both the staff member's home server as well as the Primary server for the address book.

Any advice would be great.


Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 4 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 4 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros