Link to home
Create AccountLog in
Avatar of Michael Green
Michael GreenFlag for Australia

asked on

An internal transport certificate expired.

Hi,
We are running Small Business Server 2008 with Exchange 2007.

I'm getting the following message in the log:

An internal transport certificate expired. Thumbprint:9790AE5E955202AE4478D4C5B4ED7EEA80714BC7

Full error message:
Log Name:      Application
Source:        MSExchangeTransport
Date:          9/11/2012 5:25:18 PM
Event ID:      12015
Task Category: TransportService
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      MWAS02.merriwinga.local
Description:
An internal transport certificate expired. Thumbprint:9790AE5E955202AE4478D4C5B4ED7EEA80714BC7
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeTransport" />
    <EventID Qualifiers="32772">12015</EventID>
    <Level>3</Level>
    <Task>12</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-11-09T06:25:18.000Z" />
    <EventRecordID>618380</EventRecordID>
    <Channel>Application</Channel>
    <Computer>MWAS02.merriwinga.local</Computer>
    <Security />
  </System>
  <EventData>
    <Data>9790AE5E955202AE4478D4C5B4ED7EEA80714BC7</Data>
  </EventData>
</Event>



How do I fix this ?
Avatar of CTCRM
CTCRM
Flag of United Kingdom of Great Britain and Northern Ireland image

Do you know if this is a SS (Self Signed) certificate?
If it is then as it has expired I would think about installing a Trusted Certifcate from GoDaddy.com or a trusted certificate provider of your choice.

The existing cert has clearly expired so the only option is to either renew the one you have or install a trusted cert that will be a lot more secure.
Avatar of Michael Green

ASKER

How do I find out what certificate has expired ?
On the SBS server
Start > Run > type MMC
Then from the console goto 'File' > Add Snapin' > Choose 'Certificates' from the list of consoles > Click the 'Computer Account' radio button > Click 'Finish'.

From the console in the lefthand pane click on 'Intermediate Certification Authorities' and then click on the 'Certificates' sub folder. This will then disaply the installed certificates in the righthand pane and one of the columns in the console is 'Expiry Date'.
ASKER CERTIFIED SOLUTION
Avatar of Dmitriy Ilyin
Dmitriy Ilyin
Flag of Russian Federation image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
SGSMikeG first of all you need open Personal hive not an Intermrdiate Certification Authorities.
And i suggest all needed command to renew your selfsigned certificate. Did you run them?
please paste result of this command
Get-ExchangeCertificate -Thumbprint '9790AE5E955202AE4478D4C5B4ED7EEA80714BC7'
[PS] C:\Windows\system32>Get-ExchangeCertificate -Thumbprint '9790AE5E955202AE44
78D4C5B4ED7EEA80714BC7'

Thumbprint                                Services   Subject
----------                                --------   -------
9790AE5E955202AE4478D4C5B4ED7EEA80714BC7  IP..S      CN=remote.merriwinga.co...


[PS] C:\Windows\system32>
I've requested that this question be deleted for the following reason:

The question has either no comments or not enough useful information to be called an "answer".