Submit a ticketCall us

Get a crash course on Network Monitoring delivered right to your inbox
This free 7-day email course provides a primer to the philosophy, theory, and fundamental concepts involved in IT monitoring. Lessons will explain not only how to perform various monitoring tasks, but why and when you should use them. Sign up now.

Home > Success Center > Patch Manager > Certificate error when performing tasks in Patch Manager

Certificate error when performing tasks in Patch Manager

Issue

When you retrieve WSUS or computer information, run reports, or perform configuration management tasks in the Patch Manager Admin Console, the following error messages display:

  • All management servers are unavailable for management group. 200 certificates
  • Setup has detected that the certificate count in the ‘Trusted Root Certificate Authorities’ store exceeds 200

The console may also display errors that indicate the RPC server is too busy or installation errors due to multiple certificates.

Environment

All Patch Manager versions

Cause

Multiple certificates in the Trusted Root Certification Authorities certificate store. If the store contains more than 200 certificates, the Microsoft algorithm used to for searching and scanning the certificate store fails. 

When you install or upgrade Patch Manager, the application warns you if you are exceeding the certificate limit. If you add new certificates and exceed the limit after you install Patch Manager, the application displays an error. .

Workaround

Reduce the certificate count in the certificates store to 180 or less. Patch Manager may require you to reduce the certificate count to 175 or less to resolve the issue. 

  1. Log in to the Patch Manager server as an administrator.
  2. Open the Run dialog box and execute:
    mmc.exe
  3. Add a new snap-in. 
    1. Press <Ctrl> + M to open the Add or Remove Snap-ins window.
    2. Select Certificates in the left pane, and click Add.
    3. In the Certificates Snap-in dialog box, select Computer account, and click Next.
    4. In the Select Computer screen, select Local computer, and click Finish.
    5. In the Add or Remove Snap-ins window, click OK.
      The Certificate Snap-ins displays.
  4. Expand Certificates (Local Computer) > Trusted Root Certification Authorities.
  5. Select Certificates in the left pane. 
  6. Delete all unnecessary certificates until the total number of certificates equals 180 or less.These certificates can include expired certificates, unknown foreign certificates, and certificates with a key length of 1024 bits or less. 
    1. In the center pane, select the certificates you want to delete. Press <Ctrl> to select multiple certificates.
    2. Click the Action menu and select Delete.
    3. Click Yes to delete the certificates. 

 

 

Last modified
13:38, 5 Jul 2017

Tags

Classifications

Public