Solved

CertificateServicesClient-AutoEnrollment ID 64

Posted on 2014-02-03
1
509 Views
Last Modified: 2014-02-17
A few months back I removed a CA from our domain. I followed the documented procedure to do so safely. I am now getting this message in the Domain Controller logs as the cert cannot auto-renew because the CA is gone.

Certificate for local system with Thumbprint xx xx xx xx ...etc is about to expire or already expired.

When looking in the certificates MMC snapin I see Intended purposes are Client Authentication, Server Authentication.

My question is this: I've seen other posts that say this does not need to be renewed if there are no services using it. - namely this one: http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Q_27846670.html -Is that true? If so, how do I search to see which services may be using this cert?
0
Comment
Question by:lbc_matt
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39831598
I hope certificate is installed on Domain Controller.
If you have removed CA already, just simply remove certificate from Domain Controller. It will not create any problems.
Once you install new Enterprise CA (Ad integrated) server in domain, it will automatically take care of Domain Controller certificate.
Also check any domain GPO where you have setup auto enrol \ renew expiring certs and disable that setting from GPO.

Mahesh
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question