asked on

Understand Impact of Windows Application Log Error-certificate issue

Windows 2008 R2 application log is showing this error.
Certificate for local system with Thumbprint 08 dc 63 b2 2e 04 1a 50 f0 9c 6e 8d 91 21 bd 2c 13 a1 76 e1 is about to expire or already expired.

I use SSL but my certificate is up to date with symantec certificate authority. What does this error mean and will it have any impact on server? If not can I remove it from showing on the event log?

Seth Simmons

it means a certificate is installed that is expired or going to expire even though it may not be used for IIS
if the certificate is not being used, you can delete it
you can look at the certificate mmc console and see what is installed
once that certificate is gone that warning will go away

kdschool

ASKER

So I went into the mmc for certificates and I am trying to locate this one. I did a find certificate from the top level (certificate local computer) and I can't find this. Is there a value below I should be looking for?

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Microsoft-Windows-CertificateServicesClient-AutoEnrollment" Guid="{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}" EventSourceName="AutoEnrollment" />
<EventID Qualifiers="32768">64</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2014-11-03T14:56:12.000000000Z" />
<EventRecordID>108074</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>xx.xx.xx.xx.com</Computer>
<Security />
</System>
- <EventData>
<Data Name="Context">local system</Data>
<Data Name="ObjId">08 dc 63 b2 2e 04 1a 50 f0 9c 6e 8d 91 21 bd 2c 13 a1 76 e1</Data>
</EventData>
</Event>

Seth Simmons

you found the cert (thumbprint matches)
if you open it, what are the validity dates?

kdschool

ASKER

No this is from the error message in the application log. I can't find the actual certificate it's talking about in the MMC.

ASKER CERTIFIED SOLUTION

Seth Simmons

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

kdschool

ASKER

ok I found it by the date then the thumbprint The dates on this one are 7/8/2013 to 7/9/2014 This is the certifciate I use for SSL so I guess it's a really early warning. I did not realize they gave the warning so far in advance. Normally symantec will let me know when they have the next certificates ready for us to install. Thanks for helping me get there. I need to keep this one.