Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 226
  • Last Modified:

Understand Impact of Windows Application Log Error-certificate issue

Windows 2008 R2 application log is showing this error.
Certificate for local system with Thumbprint 08 dc 63 b2 2e 04 1a 50 f0 9c 6e 8d 91 21 bd 2c 13 a1 76 e1 is about to expire or already expired.

I use SSL but my certificate is up to date with symantec certificate authority.  What does this error mean and will it have any impact on server?  If not can I remove it from showing on the event log?
1
kdschool
Asked:
kdschool
  • 3
  • 3
1 Solution
 
Seth SimmonsSr. Systems AdministratorCommented:
it means a certificate is installed that is expired or going to expire even though it may not be used for IIS
if the certificate is not being used, you can delete it
you can look at the certificate mmc console and see what is installed
once that certificate is gone that warning will go away
0
 
kdschoolAuthor Commented:
So I went into the mmc for certificates and I am trying to locate this one.  I did a find certificate from the top level (certificate local computer) and I can't find this. Is there a value below I should be looking for?

<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
  <Provider Name="Microsoft-Windows-CertificateServicesClient-AutoEnrollment" Guid="{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}" EventSourceName="AutoEnrollment" />
  <EventID Qualifiers="32768">64</EventID>
  <Version>0</Version>
  <Level>3</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x80000000000000</Keywords>
  <TimeCreated SystemTime="2014-11-03T14:56:12.000000000Z" />
  <EventRecordID>108074</EventRecordID>
  <Correlation />
  <Execution ProcessID="0" ThreadID="0" />
  <Channel>Application</Channel>
  <Computer>xx.xx.xx.xx.com</Computer>
  <Security />
  </System>
- <EventData>
  <Data Name="Context">local system</Data>
  <Data Name="ObjId">08 dc 63 b2 2e 04 1a 50 f0 9c 6e 8d 91 21 bd 2c 13 a1 76 e1</Data>
  </EventData>
  </Event>
0
 
Seth SimmonsSr. Systems AdministratorCommented:
you found the cert (thumbprint matches)
if you open it, what are the validity dates?
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
kdschoolAuthor Commented:
No this is from the error message in the application log.  I can't find the actual certificate it's talking about in the MMC.
0
 
Seth SimmonsSr. Systems AdministratorCommented:
oh...in the console look at the expiration date and see if there is anything in the near future
0
 
kdschoolAuthor Commented:
ok I found it by the date then the thumbprint   The dates on this one are 7/8/2013 to 7/9/2014  This is the certifciate I use for SSL so I guess it's a really early warning.  I did not realize they gave the warning so far in advance.  Normally symantec will let me know when they have the next certificates ready for us to install. Thanks for helping me get there.  I need to keep this one.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now