Robert H. Hollar, Jr.


Fixing It
Go
Expired Certificate Warning
November 23, 2015
Robert H. Hollar, Jr.

When checking your event viewer for possible errors you may come across a warning that says 'CertificateServicesClient-AutoEnrollment'. This is due to a certificate that is about to expire or already has. This message will start showing when your certificate has passed 90 percent of its validity period and that there may be a problem automatically obtaining a new certificate through autoenrollment.

There are some key pieces of information that will help you when trying to resolve this. The first thing is determining which certificate is causing the error to happen. To do this click on the warning so that the general message will show. In the warning message the certificate hash will be right after Thumbprint and will look something like this:

Event 64 Warning

The next step is correcting the issue. To do this, you can try renewing the certificate or if it's an old certificate that you don't need anymore, simply delete it.

To Renew Your Certificate:

  1. Click Start, type mmc, and then press ENTER.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. On the File menu, click Add/Remove Snap-in, click Certificates, and then click Add.
  4. Select the user or computer account that logged the error, and click Next.
  5. Click Finish, and then click OK.
  6. In the console tree, click Certificates - Current User or Certificates (Local Computer), and then click Personal.
  7. In the console tree, double-click Certificates, double-click Personal, and then click Certificates.
    Event 64 Warning
  8. Locate the certificate with the thumbprint listed in the event log message.
    Event 64 Warning
  9. Right-click the certificate, and select one of the Renew Certificate options to start the Certificate Renewal Wizard and renew the CA certificate.

To Delete Your Certificate:

  1. Click Start, type mmc, and then press ENTER.
  2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.
  3. On the File menu, click Add/Remove Snap-in, click Certificates, and then click Add.
  4. Select the user or computer account that logged the error, and click Next.
  5. Click Finish, and then click OK.
  6. In the console tree, click Certificates - Current User or Certificates (Local Computer), and then click Personal.
  7. In the console tree, double-click Certificates, double-click Personal, and then click Certificates.
    Event 64 Warning
  8. Locate the certificate with the thumbprint listed in the event log message.
    Event 64 Warning
  9. Right-click the certificate, and select Delete

And that's it, you should no longer see the warning show up in your event viewer.

Event Viewer

Event ID: 64
Source: CertificateServicesClient-AutoEnrollment
Level: Warning
General: Certificate for local system with Thumbprint is about to expire or already expired.

References


Keywords

Certificate, Event Viewer, Warning, Renewal, Expired, Expired Certificate, Microsoft