Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
Connection to configuration server is broken (ISASTGCTRL certificate expired)

Proposed Answer Connection to configuration server is broken (ISASTGCTRL certificate expired)

  • Saturday, December 29, 2012 7:30 AM
     
     
    Sign In to Vote
    0

    hi......this is farooq

    we have the same scenario

    we have ISA configuration server(ISACS01) and two ISA array members( ISA01 & ISA02)

    few days back one of the certificate in the ISA configuration server got  expired and i renews it perfectly and placed on the certicate personal store on the ISACS01 but the daily reports on the ISA is getting failed( geting " generating" continously

     and also when iam trying to communicate with ISACS01( ISA configuration server using the troubleshooting tab( Traffic simulator) in the ISA console in ISA array member) i am getting the following error.

    "Traffic simulator cannot be completed.
    The configuration of the selected server is not syncronized with the configuration storage server.check synchonization tab of moniroting node in ISA
    Server management."

    Kindly let me know whether iam missing something

    yOUR REPLY IS HIGLHLY APPRECIATED...........

     

All Replies

  • Saturday, December 29, 2012 8:33 AM
     
     
    Sign In to Vote
    0

    Hi,

    did you used the ISACERTTOOL to renew the certificate?
    http://www.microsoft.com/en-us/download/details.aspx?id=4535

    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

     
  • Saturday, December 29, 2012 9:34 AM
     
     
    Sign In to Vote
    0

    Dear Marc,

    Thanks for the reply..

    we are using ISA Configuration server to generate the Internal Certificate( it is a internal certificate generation server)

    so i have generated the local certificate for ISA configuration server from the same server itself and applied their...

    but  i dont know why the communication between the array members and ISA configuration is not happenign..

    kindly help us in this regard..

     
  • Saturday, December 29, 2012 11:46 AM
     
     
    Sign In to Vote
    0

    Hi,

    in which certificate store did you stored the certificate?

    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

     
  • Saturday, December 29, 2012 12:29 PM
     
     
    Sign In to Vote
    0
    I stored in the personal store........on the ISA configuration server
     
  • Saturday, December 29, 2012 12:58 PM
     
     
    Sign In to Vote
    0

    Hi,

    the certificate must be stored in the certificate store of the ISASTGCTRL service on the CSS Server

    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

     
  • Saturday, December 29, 2012 1:43 PM
     
     
    Sign In to Vote
    0

    i successfully update the certifcate as per to your instructions but still iam unable to generate  the report and inway there is no syncronization between the array member and the ISA configuration server,

     
  • Saturday, December 29, 2012 2:26 PM
     
     
    Sign In to Vote
    0

    Hi,

    do you use ISA Server with CSS in workgroup mode? Here are some steps for troubleshooting CSS access:
    http://technet.microsoft.com/en-us/library/cc302686.aspx

    regards Marc Grote aka Jens Baier - www.it-training-grote.de - www.forefront-tmg.de - www.nt-faq.de

     
  • Saturday, December 29, 2012 7:33 PM
     
     
    Sign In to Vote
    0

    Thanks for the reply,

    We have ISACS( CSS ) server in domain and TWO ISA Array members( ISA01, ISA02) are in Workgroup.

    And our platform working on ISA server 2006 enterprise edition.

     I checked the attached article provided by you for the following points.

    • Physical connectivity
    • Name resolution
    • Flawed credentials

    Everything seems to be correctly configured but still i do not know what is missing,???

    kindly help me in this regard as the report is not generated.


    • Edited by mafarooq Sunday, December 30, 2012 8:48 AM full information
    •  
     
  • Monday, December 31, 2012 12:25 PM
     
     
    Sign In to Vote
    0

    Dears

    Any update on the above issue......

    kindly need your support.

     
  • Thursday, January 03, 2013 3:33 AM
    Moderator
     
     Proposed Answer
    Sign In to Vote
    0

    Hi,

    Thank you for the post.

    You may refer to this similar thread: http://social.technet.microsoft.com/Forums/en-US/ForefrontedgeIA/thread/e4c30c54-9f29-4832-9f3d-44385e764cd7

    Regards,

    Nick Gu - MSFT

     
  • Saturday, January 05, 2013 8:09 AM
     
     
    Sign In to Vote
    0

    Hi thanks for the reply,

    the ISA  certificate on the trust root CA is already been installed.

    but sitll the issues remains the same.

    kindly provide me the solutions.

    thanks once again for the reply.

     
  • Saturday, January 26, 2013 7:42 AM
     
     
    Sign In to Vote
    0

    Dears,

    Any update on the above issue ............iam eagerly waiting for the correct solution....

    thanks