Monday, December 6, 2010

Repairing an Invalid Certificate (for Exchange or Lync/OCS)

Certificates are a part of Exchange and OCS/Lync, there is no getting away from them.  Because of this, I have seen numerous issues not only around the names in a certificate (another future post), but also with provisioning certificates. 

Exchange and OCS/Lync are programmed to not allow the use of invalid certificates.  The two top reasons that I see invalid certificates have to do with:

  • Missing private key
  • Certificate Chain issues

Missing Private Key

There are several reasons that a certificate can have a missing private key.  These include, but are not limited to:

  • Did not complete the pending certificate request from the originating server
  • Import a .cer or .crt file into the certificate store
  • Export a certificate without including the private key and then import on a different server

So now that we have a certificate without the private key, what do we do now?  Well, you can either reissue the certificate and work with your CA to get a new certificate or we can try to repair the certificate’s private key.  The later is the path of least resistance.  So let’s look at that process.

By opening the troubled certificate in the Certificates MMC Snap-in, we can see that the certificate does not have the private key.

Cert - no PK - markup

To repair the key, we will need to get the certificate’s Serial Number.  We can do that from the Details Tab of the certificate.

Cert - Serail num

Now we will open a command prompt and run the following command:

certutil –repairstore my “SerialNumber”

Cert - CMD Repairstore

After running the command and refreshing the Certificates MMC Snap-in, we can reopen the troubled certificate and see that it now has a valid private key:

Cert - with PK - markup

Now the certificate will be available to select in Exchange or OCS/Lync to utilize.

If this process does not work, then you will have to reissue your certificate and request a new certificate from your CA.

Certificate Chain Issue

The other main issue with invalid certificates have to do with getting the Certificate Chain installed appropriately.  Most certificate chain issues can be viewed from the Certificate Path tab of the certificate properties.  CA’s usually have detailed instructions and downloads of the chains.  I suggest you work with the CA to install the certificate chain properly as they are all different and have different requirements.

Digicert has a great web-based utility to test and uncover certificate chain related issues.  Navigate to:

http://www.digicert.com/help

I hope this helps!  I know this has saved me quite a bit of time over the years.

71 comments:

  1. Replies
    1. Microsoft Uc And Other Stuff...: Repairing An Invalid Certificate (For Exchange Or Lync/Ocs) >>>>> Download Now

      >>>>> Download Full

      Microsoft Uc And Other Stuff...: Repairing An Invalid Certificate (For Exchange Or Lync/Ocs) >>>>> Download LINK

      >>>>> Download Now

      Microsoft Uc And Other Stuff...: Repairing An Invalid Certificate (For Exchange Or Lync/Ocs) >>>>> Download Full

      >>>>> Download LINK nL

      Delete
  2. I always thought that error of invalid certificates occur due to wrong certificate or missing certificate i never knew about Certificate Chain issues.

    ReplyDelete
  3. You just made something that I thought was so difficult be, truly, so easy! Thanks for the post!

    ReplyDelete
  4. I read above post and like it. Really, this is best information for those person suffering certificate problem.

    Thanks

    Digital Signature Certificate

    ReplyDelete
  5. Thank you for providing the valuable information to us.
    Digital signature

    ReplyDelete
  6. See InterSSL for SSL certificates, e.g. PositiveSSL wildcard, RapidSSL, etc.

    ReplyDelete
  7. Thank you for providing the valuable information to us. nice post can we use digital signature for income tax password unlock

    ReplyDelete
  8. Mukapoker memberikan Deposit IDN Poker termurah melalui beberapa bank lokal di Indonesia. Kunjungi situs resmi kami sekarang juga dan dapatkan juga bonus jutaan rupiah setiap harinya saat telah menjadi member kami.

    https://standresjournals.org
    http://acccsports.org
    http://stevejordan.net
    http://yaltachekhov.org
    http://humanf.org

    ReplyDelete
  9. This comment has been removed by the author.

    ReplyDelete
  10. Nice article
    Thanks for sharing us
    Please support us
    201 Know about cities locations map timezone

    ReplyDelete
  11. Dapatkan ID Sbobet serta link alternatif taruhan judi bola online sekarang juga dan dapatkan pula bonus jutaan rupiah setiap harinya saat telah menjadi anggota member Sukaslot.

    ReplyDelete
  12. WOW! I Love it...
    and i thing thats good for you >>


    MOVIE Trailer Thank you!

    ReplyDelete
  13. Fantastic blog, You have performed an impressive job and our entire group might be thankful to you.

    Here My HomePage : BC Wrestling ,Judi Euro 2020, Cara Main Joker123

    ReplyDelete
  14. Superb and really very good informative post. Contact for Digital Signature Certificate in Delhi at lowest price.

    ReplyDelete
  15. This is a great post. I like this topic.This site has lots of advantage.I found many interesting things from this site. It helps me in many ways.Thanks for posting this again. فروش لایسنس اورجینال

    ReplyDelete
  16. Enjoyed reading the blog. I'd like to appreciate you for sharing such wonderful information. Capricorn CA is India's preferred Certifying authority to issue Digital Signature.

    ReplyDelete
  17. Very good written article. It will be supportive to anyone who utilizes it, including me. Keep doing what you are doing – can’r wait to read more posts.สล็อตวอเลท

    ReplyDelete
  18. Awesome article! I want people to know just how good this information is in your article. It’s interesting, compelling content. Your views are much like my own concerning this subject.สล็อตแตกง่าย

    ReplyDelete
  19. I have a hard time describing my thoughts on content, but I really felt I should here. Your article is really great. I like the way you wrote this information.บา คา ร่า วอ เลท

    ReplyDelete
  20. Thank you for another great article. Where else could anyone get that kind of information in such a perfect way of writing? I have a presentation next week, and I am on the look for such information.สล็อตแตกง่าย

    ReplyDelete
  21. Thank you for some other informative website. The place else may just I get that kind of information written in such a perfect method? I have a venture that I am simply now running on, and I’ve been at the glance out for such info.เกมสล็อต

    ReplyDelete
  22. Microsoft Uc And Other Stuff...: Repairing An Invalid Certificate (For Exchange Or Lync/Ocs) >>>>> Download Now

    >>>>> Download Full

    Microsoft Uc And Other Stuff...: Repairing An Invalid Certificate (For Exchange Or Lync/Ocs) >>>>> Download LINK

    >>>>> Download Now

    Microsoft Uc And Other Stuff...: Repairing An Invalid Certificate (For Exchange Or Lync/Ocs) >>>>> Download Full

    >>>>> Download LINK Fe

    ReplyDelete

  23. เว็บ สล็อต เว็บ ใหญ่ สามารถเล่นได้ผ่านทุกแพลตฟอร์มได้ฟรีไม่เสียค่าใช้จ่ายใดๆทั้งสิ้น รองรับการเล่นผ่านหน้าเว็บไซต์ หรือดาวน์โหลดเล่นผ่านโทรศัพท์มือถือ

    เว็บ สล็อต ออนไลน์ ที่ดีที่สุด ในประเทศไทย ไม่ผ่านเอเย่นต์ สมัครง่าย ไม่ถึง 3 นาที

    ReplyDelete
  24. Thanks for sharing such useful information with us. I hope you will share some more info about your blog. Please keep sharing.
    ติดต่อสอบถาม igoal88

    ReplyDelete
  25. Congratulations on your article, it was very helpful and successful. a74e005f20e4a27584a8035e45b9e37d
    website kurma
    website kurma
    sms onay

    ReplyDelete
  26. Thank you for your explanation, very good content. 52d99eb04456f7f74b7ca6e53ba9d944
    define dedektörü

    ReplyDelete
  27. Betturkey giriş adresine buradan ulaşabilirsiniz.
    betturkey giriş

    4W08

    ReplyDelete
  28. slot168 ทางเข้า จึงได้รับความนิยมมากที่สุดในไทย pg พร้อมกับมีระบบสมัครสมาชิก ฝาก-ถอน เเบบอัตโนมัติหรือเรียกว่า Slot ออกเเบบระบบโดยผู้เชี่ยวชาญใช้งานได้ทุกเครือข่ายรวดเร็ว

    ReplyDelete
  29. รีวิว bozz777 ครับ ผมเป็น AI ที่ถูกสร้างขึ้นเพื่อช่วยให้คุณได้รับความช่วยเหลือและคำแนะนำในการเขียนบทความภาษาไทย PG SLOT

    ReplyDelete
  30. Always consult with a qualified female to male massage in hyderabad professional to ensure that the massage service is safe and appropriate for your health status.

    ReplyDelete
  31. Blind Massage, also known as Visually Impaired Massage or Blind Therapist Massage, refers body to body massage centre to massage therapy provided by individuals who are blind or visually impaired.

    ReplyDelete
  32. Discover the benefits, find top-notch spas, and learn how to choose the perfect massage for your needs. Get ready to rejuvenate your body and mind visit body massage in bangalore

    ReplyDelete
  33. A full body sensual massage can be enjoyed in different ways. For example, it can be practiced between lovers,

    ReplyDelete
  34. 3k สล็อต ฝากถอนไม่มีอย่างต่ำ 3kauto VIP เว็บไซต์สุดพิเศษมี ค่ายเกมสล็อต pg slot ให้เล่นมากมายก่ายกอง 3k auto แอตมินสาวสวยบริการตลอด24ชัวนาฬิกา 19 รับ100 ทดลองรับระบบวอเลท

    ReplyDelete
  35. racha สล็อต นันแบบอย่าง ออนไลน์ที่คุณ รวมทั้ง คนประเทศไทย ตอนนี้ pg slot ให้ความชื่นชอบกันเป็นอย่างยิ่ง จริงๆ แล้วเกมส์ เดิมเหล่า ก็มีมาตั้งแต่นานแล้วเพิ่งเป็นที่ นิยมสูง

    ReplyDelete
  36. spa treatments like aromatherapy or sauna sessions, which also contribute to relaxation and stress reduction, so we provide best spa service at b2b massage near me center, there are available hot massage girl therapists, so come and enjoy

    ReplyDelete
  37. Finding the perfect massage parlour is crucial for those seeking a moment of relaxation and relief from life's stress. In this guide, we will explore the finest options available when you search for a full body massage near me

    ReplyDelete
  38. We provide a relaxing massage for a reasonable price. A massage in Chennai will stay with you forever. Our female masseuses are the most beautiful.

    ReplyDelete
  39. In this hectic life, we have no time to take care of ourselves, hence therapy is needed for rejuvenation and stress reduction visit izspa

    ReplyDelete