Solved

renew trusted root certification authorities for domain controller

Posted on 2013-11-22
4
3,113 Views
Last Modified: 2013-11-25
Hello,
I noticed today that our Trusted root certificate on the domain controller expired. My users get an error when trying to connect to our wireless network (Aruba), I called Aruba support they could not find an issue. the error users get is Cannot authenticate because the certificate cannot be found on this computer, I am assuming the the expired certificate is the issue, I could not find a way to renew the certificate for renew trusted root certification authorities.
Is the error my users get related to the expired certificate, if yes how can I renew the certificate?
Thank you
0
Comment
Question by:rfinaly
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 

Expert Comment

by:dlbrody69
ID: 39670798
yes it is most likely a cert issue. Can you attach it here so we can look at it and its chain?
0
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39671165
Your comment
"I noticed today that our Trusted root certificate on the domain controller expired"

Certificate Services enforces a rule that a CA never issues a certificate to be valid beyond the expiration date of its own certificate. Therefore, when a CA's certificate reaches the end of its validity period, all certificates it has issued will also expire.
http://technet.microsoft.com/en-us/library/cc740209(v=ws.10).aspx

In your case root CA certificate has been expired.
if you using windows based CA to issue client certificate, then
You need to renew trusted root certificate 1st on CA server and distribute the same to all clients throug GPO then,
you need to issue or renew client certificates also.

http://technet.microsoft.com/en-us/library/cc780374(v=ws.10).aspx - renew root ca cert
http://technet.microsoft.com/en-us/library/cc776691(v=ws.10).aspx - renew subordinate ca cert
http://technet.microsoft.com/en-us/library/cc772491.aspx - add trusted root certificate to GPO for auto enrollment on clients

Mahesh
1
 
LVL 9

Expert Comment

by:VirastaR
ID: 39671699
0
 

Author Closing Comment

by:rfinaly
ID: 39676412
thank you
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through setting the global and backup job media overwrite and protection periods in Backup Exec 2012. Log onto the Backup Exec Central Administration Server. Examine the services. If all or most of them are stop…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question