SEPM with SQL Express database certificate has expired

Products

• Endpoint Protection

Issue/Introduction

The certificate for SEPM and SQL has expired and needs to be updated.

Unable to log into the SEPM Console, error: An unexpected Server error has occurred

You may also see the error: Request could not be authorized.

Error in the system log (scm-server-0.log):

java.sql.SQLException: Cannot create PoolableConnectionFactory (The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "NotAfter: Fri Jan 03 16:35:27 CET 2025"
(time will depend on when the SQL certificate expired).

Environment

14.3.x 
SQL Express "embedded" database

Resolution

1. Move the date of the system back before the certificate expired.
2. Login to the SEPM Console
   NOTE: Errors may appear, but it will login eventually
3. Go to Settings - Servers - Select the SEPM in the site list - select Manage Server Certificates.
4. Choose the option to create a new self-signed certificate and uncheck the option to create new keys.
   NOTE: If the checkbox for create new keys is checked, the clients will not be able to reconnect to the SEPM
5. When complete, close down the console.
6. Restart the 3 services:
   Symantec Endpoint Protection Manager
   Symantec Endpoint Protection Manager API Service
   Symantec Endpoint Protection Manager Webserver
7. Launch the Management Server Configuration Wizard.
8. On the first page to Reconfigure the server, uncheck the option to restore keys.
9. Go through the rest of the wizard (defaults are fine).
10. When complete, set the date of the system back to today's date.
11. Reboot the system.
12. Confirm you can log back into the console with the current date.

If the above doesn't work, please check this article:

https://knowledge.broadcom.com/external/article/204411/you-received-an-email-from-your-sepm-sta.html