CertSvc, Event ID: 58

CertSvc, Event ID: 58

Post by SmltIFJheW » Sat, 10 Jan 2009 09:25:18


Hello All
Small problem. The cer that was originally created when we set up the
server expired and I went through the ICW wizard again and created a new cert
with the same name and everything went fine. Now I am getting the below
error consistantly:

Error:: CertSvc, Event ID: 58
A certificate in the chain for CA certificate 0 for Global Building has
expired. A required certificate is not within its validity period when
verifying against the current system clock or the timestamp in the signed
file. 0x800b0101 (-2146762495)

I am thinking that I need to smoehow get the new cert in but how do I do
this?

TIA


--
Jim

"Nothing is fool proof to a talented fool"
 
 
 

CertSvc, Event ID: 58

Post by v-milel » Sat, 10 Jan 2009 19:34:14

Hello,

Thank you for posting here.

According to your description, I understand that:

You receive the Event 58 after you renew the certificate on the SBS server.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
======================
First of all, I'd like to know whether you create a self-signed certificate
or you enroll a certificate from CA. If you just create a self-signed
certificate in the CEICW, you may check whether the new self-signed
certificate has been added to the trusted root certificate store properly.
To check that:

1. Run "MMC" in the command prompt to open the MMC console.
2. In the MMC console, click File--->Add/remove snap-in--->Choose the
Certificate and click Add.
3. Select the Computer account for the Certificate snap-in, choose the
local computer and click Finish.
4. In the Certificates(Local computer)--->Personal--->Certificate, double
the newly created certificate.
5. Verify whether the CA root for this certificate is trusted.
6. If the certificate is not trusted, you may right click the
certificate--->Copy and paste it to the Trusted Root Certification
Authorities.
6. Then check how it works.

Moreover, does the newly created certificate work well for the Companyweb
and etc?

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.



Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 
 
 

CertSvc, Event ID: 58

Post by SmltIFJheW » Sun, 11 Jan 2009 03:29:01

Miles,
Thanks for your quick response. I performed the steps below and it did
not resolve the issue. I also checked company web from both IE and for the
IIS manager console and it does not display. I the website declined to show
in both.
Can you provide some additional options. Thanks


--
Jim

"Nothing is fool proof to a talented fool"
 
 
 

CertSvc, Event ID: 58

Post by v-milel » Tue, 13 Jan 2009 19:42:27

Hello,

Thanks for the update.

From my research, the Certsrv error seems to be related to the CA service.
In the case that you are using a self singed certificate, I would like to
suggest you to collect the IIS metabase to troubleshoot the IIS issues. To
gather the IIS Metabase:

a) Download the IIS Resource Kit tools from the following page:
http://www.yqcomputer.com/
B628-ADE629C89499&displaylang=en

b) Install it, run MBExplorer (Metabase Explorer)

c) Right click the "LM" node and choose "Export to file".

d) Specify a file name, specify the password and finish the export.

e) Send the file and the password to XXXX@XXXXX.COM
Moreover, for further investigation of the Certsrv error you may collect
the Directory Service MPS report on server that includes the event logs.
You can also send the MPS report to me at Miles Li
<mailto: XXXX@XXXXX.COM >.

Microsoft Product Support's Reporting Tools (MPSRPT_DirSvc.EXE)
http://www.yqcomputer.com/
88B7-F9C79B7306C0&displaylang=en

Hope it helps. If you have any questions or concerns, please do not
hesitate to let me know.




Best regards,
Miles Li

Microsoft Online Partner Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.