Submit a ticketCall us

Have You Auto Renewed? If not, you're missing out.
The SolarWinds Renewal Program comes with a host of benefits including the most recent product updates, 24/7 technical support, virtual instructor-led training and more. Experience all of this with the convenience of Auto Renewal, and never worry about missing any of these great benefits. Learn More.

Home > Success Center > Patch Manager > Patch Manager installation error: Over Certificate limit

Patch Manager installation error: Over Certificate limit

Created by Leif Amland, last modified by MindTouch on Jun 23, 2016

Views: 66 Votes: 1 Revisions: 12

Overview

Patch Manager displays the following error message when you attempt to retrieve WSUS or computer information, run reports, or perform configuration management tasks. Additionally, you may also see errors that indicate the "RPC Server is Too Busy," or installation errors due to too many certificates.

 

Error Messages:

  • All management servers are unavailable for management group. 200 certificates
  • Setup has detected that the certificate count in the ‘Trusted Root Certificate Authorities’ store exceeds 200

Environment

All Patch Manager versions

Cause

This error is caused by having too many certificates in the Patch Manager server's Trusted Root Certification Authorities certificate store. If there are more than 200 certificates in this store, Microsoft's algorithm for searching and scanning the store fails. Patch Manager warns you during installation and upgrades if you are over this limit. However, it returns the previous error message if you add new certificates and exceed the limit after you have installed Patch Manager.

Resolution

To reduce the number of certificates on your Patch Manager server:

The snap-in lists the certificates in the center pane, and displays the total number of certificates in the status bar at the bottom of the MMC window.

  1. Open the Run dialog on the affected Patch Manager server, and then enter mmc.exe.
  2. After the Console window opens, press Ctrl+M to add a new snap-in:
    1. In the Add or Remove Snap-ins window, select Certificates in the left pane, and then click Add.
    2. In the Certificates snap-in dialog, select Computer account, and then clickNext.
    3. On the Select Computer screen, select Local computer, and then clickFinish.
    4. Back on the Add or Remove Snap-ins window, click OK.
  3. After the Certificates snap-in loads, expand Certificates (Local Computer) > Trusted Root Certification Authorities, and then select Certificates in the left pane.
  4. Delete all unneeded certificates until the total number of certificates is around 180:
    1. In the center pane, select the certificate(s) you want to delete. Use Ctrl+clickto select multiple certificates.
    2. Click the Action menu, and then select Delete.
    3. On the confirmation dialog, click Yes to delete the certificate.

The following are examples of certificates that are generally considered safe to delete:

  • Expired certificates
  • Unknown foreign certificates
  • Certificates with a key-length of 1024 bits or smaller

 

 

Last modified

Tags

Classifications

Public