Exchange
--
Questions
--
Followers
Top Experts
Exchange 2010 Server Event ID 64
Windows 2008 R2
Exchange Server 2010 Enterprise
Found this
https://technet.microsoft.com/en-us/library/cc774595(v=ws.10).aspx
I ran MMC added Certificates (Local Computer)
Expanded Personal and found the Certs in question
When I try to renew the cert I get an error
The permissions on the certificate template do not allow the current user to enroll for this type of certificate
You do not have permission to view this type of certificate
I am logged on as the Domain Administrator to the server
Any ideas ?
Exchange Server 2010 Enterprise
Log Name: Application
Source: Microsoft-Windows-CertificateServicesClient-AutoEnrollment
Date: 6/16/2017 8:26:20 PM
Event ID: 64
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: SERVER25.MYNET.com
Description:
Certificate for local system with Thumbprint 00 07 7f 49 67 8d d2 40 d5 a8 31 06 4d 55 ca b9 5b 25 cc f4 is about to expire or already expired.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-CertificateServicesClient-AutoEnrollment" Guid="{F0DB7EF8-B6F3-4005-9937-FEB77B9E1B43}" EventSourceName="AutoEnrollment" />
<EventID Qualifiers="32768">64</EventID>
<Version>0</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-06-17T00:26:20.000000000Z" />
<EventRecordID>861324</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>server25.mynet.com</Computer>
<Security />
</System>
<EventData>
<Data Name="Context">local system</Data>
<Data Name="ObjId">00 07 7f 49 67 8d d2 40 d5 a8 31 06 4d 55 ca b9 5b 25 cc f4</Data>
</EventData>
</Event>Found this
https://technet.microsoft.com/en-us/library/cc774595(v=ws.10).aspx
I ran MMC added Certificates (Local Computer)
Expanded Personal and found the Certs in question
When I try to renew the cert I get an error
The permissions on the certificate template do not allow the current user to enroll for this type of certificate
You do not have permission to view this type of certificate
I am logged on as the Domain Administrator to the server
Any ideas ?
Zero AI Policy
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
Please perform the following steps on your CA server:
1. Open the Certificate Templates snap-in
2. Open Certificates Templates tree.
3. In the contents pane, right-click the Web Server template, and then click Duplicate Template.
4. Click Windows Server 2008 Enterprise, and then click OK.
5. In Template display name, type Web Server 2008.
6. Security tab.
7. Authenticated Users->select Enroll in the Allow column.
8. Add->Domain Computers
9. Domain Computers->select Enroll in the Allow column.
10. Request Handling tab.
11. Allow private key to be exported.
12. Close all windows
13. Open Certification Authority snap-in.
14. Expand the CA->right-click Certificate Templates->New->Certificat
15. Select Web Server 2oo8 and close
1. Open the Certificate Templates snap-in
2. Open Certificates Templates tree.
3. In the contents pane, right-click the Web Server template, and then click Duplicate Template.
4. Click Windows Server 2008 Enterprise, and then click OK.
5. In Template display name, type Web Server 2008.
6. Security tab.
7. Authenticated Users->select Enroll in the Allow column.
8. Add->Domain Computers
9. Domain Computers->select Enroll in the Allow column.
10. Request Handling tab.
11. Allow private key to be exported.
12. Close all windows
13. Open Certification Authority snap-in.
14. Expand the CA->right-click Certificate Templates->New->Certificat
15. Select Web Server 2oo8 and close
Naveen
Thanks for the response
I followed all your steps and they were all successful.
I attached a screen shot the two certificates issued to administrator are about to expire hence the event ID 64 message
How do I renew those two
Thanks again
Tom
screenshot.png
Thanks for the response
I followed all your steps and they were all successful.
I attached a screen shot the two certificates issued to administrator are about to expire hence the event ID 64 message
How do I renew those two
Thanks again
Tom
screenshot.png
Why is it issued to Administrator? I believe those are not required for Exchange. what ate the SAN urls in the certificate.
EARN REWARDS FOR ASKING, ANSWERING, AND MORE.
Earn free swag for participating on the platform.
Naveen
Not sure why they are issued to administrator.
Where is that information you are looking or located? SAN urls ?
Thanks
Tom
Not sure why they are issued to administrator.
Where is that information you are looking or located? SAN urls ?
Thanks
Tom
Then you can ignore that certificate and remove them from the store once expired. Exchange does not require them,
Naveen
I was thinking the same thing just remove them
Wish there was a way to disable them
Do I really need to wait till the expire or just do them now?
Thanks
I was thinking the same thing just remove them
Wish there was a way to disable them
Do I really need to wait till the expire or just do them now?
Thanks
Get a FREE t-shirt when you ask your first question.
We believe in human intelligence. Our moderation policy strictly prohibits the use of LLM content in our Q&A threads.
ASKER CERTIFIED SOLUTION
membership
Log in or create a free account to see answer.
Signing up is free and takes 30 seconds. No credit card required.
REmoved and all good
Exchange
--
Questions
--
Followers
Top Experts
Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.