Solved

CertificateServicesClient-AutoEnrollment ID 64

Posted on 2014-02-03
1
486 Views
Last Modified: 2014-02-17
A few months back I removed a CA from our domain. I followed the documented procedure to do so safely. I am now getting this message in the Domain Controller logs as the cert cannot auto-renew because the CA is gone.

Certificate for local system with Thumbprint xx xx xx xx ...etc is about to expire or already expired.

When looking in the certificates MMC snapin I see Intended purposes are Client Authentication, Server Authentication.

My question is this: I've seen other posts that say this does not need to be renewed if there are no services using it. - namely this one: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_27846670.html -Is that true? If so, how do I search to see which services may be using this cert?
0
Comment
Question by:lbc_matt
1 Comment
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39831598
I hope certificate is installed on Domain Controller.
If you have removed CA already, just simply remove certificate from Domain Controller. It will not create any problems.
Once you install new Enterprise CA (Ad integrated) server in domain, it will automatically take care of Domain Controller certificate.
Also check any domain GPO where you have setup auto enrol \ renew expiring certs and disable that setting from GPO.

Mahesh
0

Featured Post

Shouldn't all users have the same email signature?

You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

Join & Write a Comment

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
SSL stands for “Secure Sockets Layer” and an SSL certificate is a critical component to keeping your website safe, secured, and compliant. Any ecommerce website must have an SSL certificate to ensure the safe handling of sensitive information like…
This tutorial will walk an individual through locating and launching the BEUtility application and how to execute it on the appropriate database. Log onto the server running the Backup Exec database. In a larger environment, this would generally be …
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now