Expired Certs (This MUST be basic question)

Secure Home | Search | About

Lost Password?

Microsoft Applications Security

get this group's latest topics as an RSS feed

add this group's latest topics to your My MSN content

add this group's latest topics to your My Yahoo content

add this group's latest topics to your Google content

Subject

Author

Date

Expired Certs (This MUST be basic question)

cLOWN gOD

06-25-2007

Re: Expired Certs (This MUST be basic question)

Brian Komar

06-26-2007

Posted by Paul Adare on September 19, 2007, 12:21 pm

If you were Registered and logged in, you could reply and use other advanced thread options

On Wed, 19 Sep 2007 09:00:00 -0700, RickyVene wrote:

> When I renew certificate with same key or new key. There's an error "This

> certificate cannot be renewed because..."

> Is that options only for Enterprise CA 2003? Because I'm using Standard CA

> 2003.

> What is the procedures to renew on Standard?

The SKU or type of CA doesn't matter. You can't renew an expired
certificate.
--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
Bubble memory: A derogatory term, usually referring to a person's
intelligence. See also "vacuum tube."

Posted by =?Utf-8?B?Umlja3lWZW5l?= on September 19, 2007, 1:00 pm

If you were Registered and logged in, you could reply and use other advanced thread options

It's not expired.

Ricky

"Paul Adare" wrote:

> On Wed, 19 Sep 2007 09:00:00 -0700, RickyVene wrote:

> > When I renew certificate with same key or new key. There's an error "This

> > certificate cannot be renewed because..."

> >

> > Is that options only for Enterprise CA 2003? Because I'm using Standard CA

> > 2003.

> >

> > What is the procedures to renew on Standard?

> The SKU or type of CA doesn't matter. You can't renew an expired

> certificate.

> --

> Paul Adare

> MVP - Virtual Machines

> http://www.identit.ca

> Bubble memory: A derogatory term, usually referring to a person's

> intelligence. See also "vacuum tube."

Posted by Paul Adare on September 19, 2007, 2:49 pm

If you were Registered and logged in, you could reply and use other advanced thread options

On Wed, 19 Sep 2007 10:00:02 -0700, RickyVene wrote:

> It's not expired.

Did you read any of the text of the thread to which you responded and which
you quoted in your follow-up? What is the exact error message you get when
you attempt to renew the cert? How are you attempting to renew the cert?
What type of cert is it? You haven't given nearly enough information for
anyone to be able to help you and you've apparently chosen an old thread to
add your post to that doesn't have anything to do with your problem.

--
Paul Adare
MVP - Virtual Machines
http://www.identit.ca
You have a tendency to feel you are superior to most computers.

Posted by Brian Komar on September 19, 2007, 7:07 pm

If you were Registered and logged in, you could reply and use other advanced thread options

Could you please provide some information!!
because..... <really important text that could help solve a problem>

Brian

> When I renew certificate with same key or new key. There's an error "This

> certificate cannot be renewed because..."

> Is that options only for Enterprise CA 2003? Because I'm using Standard

> CA

> 2003.

> What is the procedures to renew on Standard?

> Thanks,

> Ricky

> "Brian Komar" wrote:

>> I am sorry, I really have no idea what you are asking

>> Can you please re-ask

>> Brian

>> > There's no renewal on 2003 Stanadard, is it only for Enterprise.

>> >

>> > In standard you need to delete and create new certificate when the cert

>> > expired.

>> >

>> > Please clarify.

>> >

>> > Thanks,

>> > Ricky

>> >

>> > "Brian Komar" wrote:

>> >

>> >> On Mon, 25 Jun 2007 18:15:04 -0700, cLOWN gOD wrote:

>> >>

>> >> > Sorry I'm a newbie, I guess I should know this, but a few days ago I

>> >> > noticed

>> >> > that the certificates were about to expire in a couple of days (on

>> >> > 6/17/2007)

>> >> > on my Cert Server, and started reading frantically through a

>> >> > Microsoft

>> >> > PKI

>> >> > Certificate book.

>> >> >

>> >> > I was (and still am unable to find ANYTHING regarding how to

>> >> > replace

>> >> > the

>> >> > expired certificates, although I gather from what I read, that there

>> >> > is

>> >> > no

>> >> > way to renew or edit them)? The expired certificates are in the

>> >> > “Trusted Root

>> >> > Certificate” /Certificates folder.

>> >> >

>> >> > Interestingly, the “_NMSTR/Certificates” folder appears to contain

>> >> > certificates (named a little differently) that have a much longer

>> >> > expiration

>> >> > period (valid till 12/31/2039). This is on a sealed test network so

>> >> > there is

>> >> > no real “critcal data” to protect, although I do kind of need to get

>> >> > it

>> >> > running for testing. Thanks!

>> >>

>> >> Just run the IIS certificate wizard again. There is an option to renew

>> >> the

>> >> certificate. This was really basic, so not included in the book. (I

>> >> may

>> >> add

>> >> it next time).

>> >> Brian

>> >>

Posted by =?Utf-8?B?Umlja3lWZW5l?= on September 19, 2007, 11:24 pm

If you were Registered and logged in, you could reply and use other advanced thread options

Mr. PKI,

I already called support and tech did so many things. But the only solution
on my 2003 standard CA is to renew the subordinate and revoke all user/server
certificates and recreate each one of them. Very painfull. Is this
automatic on Enterprise or the same process? I haven't finished your book
reading about it.

Anyways, I've check my new signed email, it's fine and ok. But my new owa
cert with the same name as the url can't be opened on the browser using IE7.
I gues I have to call another support for exchange/OWA. Internally I can
open it, only externally. Or maybe because of ISA 2004. OWA was working
fine before this renewal.

Can you please give me a clue what's happening? Maybe because I haven't
restarted the server although I restarted all the exchange services.

Thanks,
Ricky

"Brian Komar" wrote:

> I am sorry, I really have no idea what you are asking

> Can you please re-ask

> Brian

> > There's no renewal on 2003 Stanadard, is it only for Enterprise.

> >

> > In standard you need to delete and create new certificate when the cert

> > expired.

> >

> > Please clarify.

> >

> > Thanks,

> > Ricky

> >

> > "Brian Komar" wrote:

> >

> >> On Mon, 25 Jun 2007 18:15:04 -0700, cLOWN gOD wrote:

> >>

> >> > Sorry I'm a newbie, I guess I should know this, but a few days ago I

> >> > noticed

> >> > that the certificates were about to expire in a couple of days (on

> >> > 6/17/2007)

> >> > on my Cert Server, and started reading frantically through a Microsoft

> >> > PKI

> >> > Certificate book.

> >> >

> >> > I was (and still am unable to find ANYTHING regarding how to replace

> >> > the

> >> > expired certificates, although I gather from what I read, that there is

> >> > no

> >> > way to renew or edit them)? The expired certificates are in the

> >> > “Trusted Root

> >> > Certificate” /Certificates folder.

> >> >

> >> > Interestingly, the “_NMSTR/Certificates” folder appears to contain

> >> > certificates (named a little differently) that have a much longer

> >> > expiration

> >> > period (valid till 12/31/2039). This is on a sealed test network so

> >> > there is

> >> > no real “critcal data” to protect, although I do kind of need to get

> >> > running for testing. Thanks!

> >>

> >> Just run the IIS certificate wizard again. There is an option to renew

> >> the

> >> certificate. This was really basic, so not included in the book. (I may

> >> add

> >> it next time).

> >> Brian

> >>

Similar Threads	Posted
Basic EFS Certificate Question	April 12, 2006, 11:47 am
Basic question on SSL handshake	March 2, 2007, 10:12 am
Very basic network security question	November 17, 2005, 6:44 pm
Expired security certificate	January 25, 2007, 4:51 pm
Change Administrator Password when expired	November 28, 2005, 2:21 pm
Verisign certificate expired - who do we buy to update?	September 14, 2007, 10:50 am
Re: certificate expired - vba macros now disabled - 50 documents...	May 27, 2005, 12:53 am
Expired Code Signing Cert with VBScript	September 12, 2006, 9:17 am
How to remove the Subordinate Enteprise CA expired certificate	April 3, 2007, 9:38 am
Cert expired - ssl still working - whats the risk?	November 8, 2007, 11:02 am

The site map in XML format XML site map