Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Understand Impact of Windows Application Log Error-certificate issue

Posted on 2014-11-03
6
Medium Priority
?
221 Views
1 Endorsement
Last Modified: 2014-11-03
Windows 2008 R2 application log is showing this error.
Certificate for local system with Thumbprint 08 dc 63 b2 2e 04 1a 50 f0 9c 6e 8d 91 21 bd 2c 13 a1 76 e1 is about to expire or already expired.

I use SSL but my certificate is up to date with symantec certificate authority.  What does this error mean and will it have any impact on server?  If not can I remove it from showing on the event log?
1
Comment
Question by:kdschool
  • 3
  • 3
6 Comments
 
LVL 36

Expert Comment

by:Seth Simmons
ID: 40419668
it means a certificate is installed that is expired or going to expire even though it may not be used for IIS
if the certificate is not being used, you can delete it
you can look at the certificate mmc console and see what is installed
once that certificate is gone that warning will go away
0
 

Author Comment

by:kdschool
ID: 40419760
So I went into the mmc for certificates and I am trying to locate this one.  I did a find certificate from the top level (certificate local computer) and I can't find this. Is there a value below I should be looking for?

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-CertificateServicesClient-AutoEnrollment" Guid="{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}" EventSourceName="AutoEnrollment" />
  <EventID Qualifiers="32768">64</EventID>
  <Version>0</Version>
  <Level>3</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2014-11-03T14:56:12.000000000Z" />
  <EventRecordID>108074</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>xx.xx.xx.xx.com</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="Context">local system</Data>
  <Data Name="ObjId">08 dc 63 b2 2e 04 1a 50 f0 9c 6e 8d 91 21 bd 2c 13 a1 76 e1</Data>
  </EventData>
  </Event>
0
 
LVL 36

Expert Comment

by:Seth Simmons
ID: 40419782
you found the cert (thumbprint matches)
if you open it, what are the validity dates?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 

Author Comment

by:kdschool
ID: 40419808
No this is from the error message in the application log.  I can't find the actual certificate it's talking about in the MMC.
0
 
LVL 36

Accepted Solution

by:
Seth Simmons earned 2000 total points
ID: 40419850
oh...in the console look at the expiration date and see if there is anything in the near future
0
 

Author Comment

by:kdschool
ID: 40419901
ok I found it by the date then the thumbprint   The dates on this one are 7/8/2013 to 7/9/2014  This is the certifciate I use for SSL so I guess it's a really early warning.  I did not realize they gave the warning so far in advance.  Normally symantec will let me know when they have the next certificates ready for us to install. Thanks for helping me get there.  I need to keep this one.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

971 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question