Getting message: Unknown or not orphaned certificate
search cancel

Getting message: Unknown or not orphaned certificate

book

Article ID: 225902

calendar_today

Updated On:

Products

IT Management Suite

Issue/Introduction

You have recently changed your Cloud-enabled Management (CEM) Certificate.

You started getting many warnings for "unknown or not orphaned certificate"   Each referring to a different computer:

Unknown or not orphaned certificate: 'ComputerA.example.com' (48b6e37e-9bd5-4f79-a8b9-03f2a858c4ae), resource: 'ComputerA' (6c42a09d-e841-4f0d-8e65-b854254604ab)
-----------------------------------------------------------------------------------------------------
Date: 10/11/2021 2:12:21 AM, Tick Count: 112916781 (1.07:21:56.7810000), Size: 416 B
Process: AeXSvc (1568), Thread ID: 248, Module: Altiris.NS.StandardItems.dll
Priority: 2, Source: CEMAgentCertificateInventoryManager

Environment

ITMS 8.6

Resolution

This warning is not a problem by itself. It is just saying that there are client machines that needed to update their certificate references. You should see similar messages in the NS logs when you enable trace logging:

Entry 1:

Operation started: Processing certificate configuration change (6c42a09d-e841-4f0d-8e65-b854254604ab) ...
-----------------------------------------------------------------------------------------------------
Date: 10/11/2021 2:12:21 AM, Tick Count: 112916750 (1.07:21:56.7500000), Size: 339 B
Process: AeXSvc (1568), Thread ID: 248, Module: AeXSVC.exe
Priority: 8, Source: CEMAgentCertificateInventoryManager

Entry 2:

Detected CEM certificate mismatch, rebinding certificates for: 'ComputerA' (6c42a09d-e841-4f0d-8e65-b854254604ab)
-----------------------------------------------------------------------------------------------------
Date: 10/11/2021 2:12:21 AM, Tick Count: 112916765 (1.07:21:56.7650000), Size: 347 B
Process: AeXSvc (1568), Thread ID: 248, Module: AeXSVC.exe
Priority: 8, Source: CEMAgentCertificateInventoryManager

Entry 3:

Operation completed: Processing certificate configuration change (6c42a09d-e841-4f0d-8e65-b854254604ab), pending=0, total time=00:00:00.0397790
-----------------------------------------------------------------------------------------------------
Date: 10/11/2021 2:12:21 AM, Tick Count: 112916796 (1.07:21:56.7960000), Size: 377 B
Process: AeXSvc (1568), Thread ID: 248, Module: AeXSVC.exe
Priority: 8, Source: CEMAgentCertificateInventoryManager

Additional Information

KB 176410 "Certificate can't be loaded from database"