Solved

CertificateServicesClient-AutoEnrollment ID 64

Posted on 2014-02-03
1
499 Views
Last Modified: 2014-02-17
A few months back I removed a CA from our domain. I followed the documented procedure to do so safely. I am now getting this message in the Domain Controller logs as the cert cannot auto-renew because the CA is gone.

Certificate for local system with Thumbprint xx xx xx xx ...etc is about to expire or already expired.

When looking in the certificates MMC snapin I see Intended purposes are Client Authentication, Server Authentication.

My question is this: I've seen other posts that say this does not need to be renewed if there are no services using it. - namely this one: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_27846670.html -Is that true? If so, how do I search to see which services may be using this cert?
0
Comment
Question by:lbc_matt
1 Comment
 
LVL 36

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39831598
I hope certificate is installed on Domain Controller.
If you have removed CA already, just simply remove certificate from Domain Controller. It will not create any problems.
Once you install new Enterprise CA (Ad integrated) server in domain, it will automatically take care of Domain Controller certificate.
Also check any domain GPO where you have setup auto enrol \ renew expiring certs and disable that setting from GPO.

Mahesh
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
RSOP Red "X" 7 44
Install Predefined Certificate on Ubunto 4 38
Sweet32 Vulnerability in Microsoft IIS7.5 6 361
Dell PowerEdge 2950 crashing on a weekly basis 5 35
Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question