We help IT Professionals succeed at work.

Expire Certificates in personal store

Anyone know what this cert if for and how i could renew it. When I right click renew I get the error no cert template info. Dell AppAssure support is blaming it for causing backups to hang and fail. Windows Server 2008 64Bit. See attached screenshot.

Thanks
Comment
Watch Question

Top Expert 2014

Commented:
It looks like the cert was issued to a CA running on that server (probably a subordinate).  I wouldn't delete it.

Author

Commented:
had no plans to delete. looking to renew.

Author

Commented:
server is used for file and print sharing only. Nothing else running.
Top Expert 2014

Commented:
Fine to renew.

Author

Commented:
craig, did you read my question?
Top Expert 2014

Commented:
Sure did.

You said that you tried to renew it and it failed, and that Dell blamed it for a backup not working.

That tells me you're looking to delete the cert, based on Dell's info.

Author

Commented:
"Anyone know what this cert if for and how i could renew it"

Dell is blaming the fact that it's expired for the backups failing. They are not telling me to delete.
Top Expert 2014

Commented:
I'll say it again.  The cert was issued to a subordinate CA.

The cert expired nearly 12 months ago.  Has the backup not worked for that long?

Author

Commented:
Guess I'm not understanding.

Says it was issued to (TLBSERVER5) by (TLBSERVER5) that's the machine with the problem. The only CA on the local network that I'm aware of is the DC. I looked on the DC and could not find this cert as being issued by it. What makes you think it was a subordinate CA? Is it not possible to renew if the subordinate is no longer available?

Backups have been fine until two weeks ago.
Top Expert 2014
Commented:
The cert was issued by a CA called TLBSERVER5 - ROOT (that's not the CA server's name, but the CA name, if you get me?).

The cert you are trying to renew is a CA certificate, but it was issued by a different CA so it must be a subordinate CA itself.  If the subordinate doesn't exist anymore (ie, the role was removed) then you can't renew the cert because it's not a CA anymore.

Anyhow, Dell have got you chasing your tail.  If the cert expired nearly 12 months ago and the issue only began 2 weeks ago, it's not the cert that's to blame.

AppAssure uses a self-signed certificate by default, so looking at your certificates there isn't a self-signed cert there for AppAssure to use.  I'd say you need to generate a new cert, either by generating a self-signed cert on the server or by purchasing a 3rd-party cert...

https://support.software.dell.com/appassure/kb/117531

Author

Commented:
Got it.

This server has only been used for file/print sharing since we bought it. I've never added or removed any roles. No clues as to how it could have had the CA role installed. I did convert it from Physical to VM but that was a couple years ago.

I figured as much with Dell.  I'm looking for a way to tell them they are full of it.

Thanks for the input.

Author

Commented:
I found this.  It looks like it was from Symantec Backup Exec. Which we no longer use. Guessing it's safe to delete? See attached.
Top Expert 2014

Commented:
Yes you can delete that cert - it's expired.