none
System Center 2012 R2 Virtual Machine Manager Certificate Expiring soon (warning message) RRS feed

  • Question

  • Hi,

    I have windows server 2012 R2 private cloud, I am receiving message on my system center virtual machine manager console. 

    Warning (20583)
    The self-signed certificate for computer pr-host13.xd.com is either already expired or is about to expire within a month.

    Recommended Action
    Remove and add the r-host13.xd.com from VMM to get a new certificate.

    But Certificate of Virtual machine manager server itself is also going to be expire soon. Please help how to solve this.


    imran

    Thursday, December 5, 2019 9:57 AM

Answers

  • Sorry, the command should be:

    Get-SCVMMManagedComputer -ComputerName "vmm2012sp1.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential

    not "Get-VMMManagedComputer", old habits of writing "VMM" :-)


    Blog: https://thesystemcenterblog.com LinkedIn:

    Tuesday, December 10, 2019 7:28 AM
  • Solution,

    I have solve my above issue with following methods,

    On my hosts server i have deleted the expired certificate and then regenerate the certificate with below command on powershell at VMMServer by logging with admin account having rights of vmmserver and host server.

    $Credential = Get-Credential

    Get-SCVMMManagedComputer -ComputerName "vmm2012sp1.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential

    Secondly my certificates also going to be expire on vmmserver itself. 

    I applied roolup 14 on vmmserver and then run the commands as mentioned in below artical. For safe side i restarted the vmmserver and agent update is pending on host servers at primary site. I tested to update new agent on my hosts servers at dr-site but failed on one host among all. Which is corrected after restart the host. 

    Renew certificates in System Center 2012 R2 Virtual Machine Manager
    https://support.microsoft.com/en-us/help/4086006/renew-certificates-in-system-center-2012-r2-virtual-machine-manager


    imran

    Tuesday, December 17, 2019 10:49 AM

All replies

  • Hi,

    If a certificate is expiring or expired, you can delete the expired certificate from the SCVMM server’s Personal Store and create a new certificate with the PowerShell commands below:

    PowerShell:

    $Credential = Get-Credential
    
    Get-VMMManagedComputer -ComputerName "VMMServer.domain.com" | Register-SCVMMManagedComputer -Credential $Credential

    You should then get a new certificate which is valid for 5 years.


    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, December 5, 2019 10:07 AM
  • Can i do it in production environment? Is there any impact on functionality while deleting the certificate from personal store?

    imran

    Thursday, December 5, 2019 10:34 AM
  • Is this a managed host in SCVMM, or is it the SCVMM server itself?

    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, December 5, 2019 10:37 AM
  • This warning message appears on both SCVMM server itself and on some managed hosts not on all but also on library server.

    imran

    Thursday, December 5, 2019 10:43 AM
  • You can use the PowerShell commands that I mentioned above for the managed hosts only, for the SCVMM server you can use the following tool to renew certificates:

    Renew certificates in System Center 2012 R2 Virtual Machine Manager
    https://support.microsoft.com/en-us/help/4086006/renew-certificates-in-system-center-2012-r2-virtual-machine-manager

    There shouldn't be any impact on renewing the certificates.


    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, December 5, 2019 10:46 AM
  • Is installation of Update Rollup 14 is necessary for system center 2012 R2 Virtual Machine manager (Restart mandatory after installation?). Secondly only first three step is required in case of virtual machine manager server itself and solve problem on hosts using powershell commands. 

    imran

    Thursday, December 5, 2019 11:05 AM
  • I believe you need the latest update rollup, which is Update Rollup 14, the update rollup also provides fixes and improvements so you should definitely consider installing it.

    Update Rollup 14 shouldn't require a reboot, if it did require a reboot it would be stated in the Update Rollup 14 article.


    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, December 5, 2019 11:09 AM
  • and what about my other question. 

    only first three step is required in case of virtual machine manager server itself and I solve problem on hosts using powershell commands stated above.


    imran

    Thursday, December 5, 2019 11:36 AM
  • Yes, run the tool for the SCVMM server itself, and run the PowerShell commands on the SCVMM server but target the managed hosts, this should solve your issues.

    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, December 5, 2019 11:39 AM
  • Is installation of Update Rollup 14 is also mandatory on all hosts servers for certificate renewal. Currently  rollup 13 is applied my host servers. 

    If I install rollup 14 on scvmm server itself. Is there any impact on hosts server after applying roolup 14 on it.


    imran

    Thursday, December 5, 2019 11:59 AM
  • The Update Rollups are only installed on the SCVMM server(s), however once you have installed a newer update rollup, a new SCVMM agent version will be available.

    You can easily update the SCVMM agent on all managed hosts through the SCVMM console (it is not a requirement, but recommended).


    Blog: https://thesystemcenterblog.com LinkedIn:

    Thursday, December 5, 2019 12:02 PM
  • Hi,

    Please first tell me should i renew certificate on my any host server without renewing the scvmm server.

    I am getting below error when i am performing your above provided steps on my host server.


    imran

    Monday, December 9, 2019 10:33 AM
  • As I mentioned earlier, you need to run the SCVMM PowerShell cmdlets on the SCVMM server.

    I would renew the certificate of the SCVMM server first, then the managed hosts.


    Blog: https://thesystemcenterblog.com LinkedIn:

    Monday, December 9, 2019 11:01 AM
  • Whats the difference between this command and your above command. Is both commands works same ?
    • Get-SCVMMManagedComputer -ComputerName "vmm2012sp1.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential

    imran

    Tuesday, December 10, 2019 7:06 AM
  • Sorry, the command should be:

    Get-SCVMMManagedComputer -ComputerName "vmm2012sp1.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential

    not "Get-VMMManagedComputer", old habits of writing "VMM" :-)


    Blog: https://thesystemcenterblog.com LinkedIn:

    Tuesday, December 10, 2019 7:28 AM
  • Solution,

    I have solve my above issue with following methods,

    On my hosts server i have deleted the expired certificate and then regenerate the certificate with below command on powershell at VMMServer by logging with admin account having rights of vmmserver and host server.

    $Credential = Get-Credential

    Get-SCVMMManagedComputer -ComputerName "vmm2012sp1.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential

    Secondly my certificates also going to be expire on vmmserver itself. 

    I applied roolup 14 on vmmserver and then run the commands as mentioned in below artical. For safe side i restarted the vmmserver and agent update is pending on host servers at primary site. I tested to update new agent on my hosts servers at dr-site but failed on one host among all. Which is corrected after restart the host. 

    Renew certificates in System Center 2012 R2 Virtual Machine Manager
    https://support.microsoft.com/en-us/help/4086006/renew-certificates-in-system-center-2012-r2-virtual-machine-manager


    imran

    Tuesday, December 17, 2019 10:49 AM
  • These are the exact methods I mentioned earlier yes :-)

    (Please don't forget to mark helpful replies as answer)


    Blog: https://thesystemcenterblog.com LinkedIn:

    Tuesday, December 17, 2019 10:52 AM
  • Hello,

    To make the thread clear to read, I write a summary here:

    Issue Symptom:

    From the VMM console, there is a warning message. 

    Warning (20583)
    The self-signed certificate for computer hostname.contoso.com is either already expired or is about to expire within a month.

    Recommended Action
    Remove and add the hostname.contoso.com from VMM to get a new certificate.

    (Possible) Cause:

    Certificate of  the host and Virtual machine manager server itself is going to be expire soon. 

    Solution:

    On the hosts server, delete the expired certificate and then regenerate the certificate with below command on powershell at VMMServer by logging with admin account having rights of vmmserver and host server.

    $Credential = Get-Credential
    
    Get-SCVMMManagedComputer -ComputerName "vmm2012sp1.contoso.com" | Register-SCVMMManagedComputer  -Credential $credential


    For the certificate on the SCVMM, please use the following tool to renew the certificate.

    Renew certificates in System Center 2012 R2 Virtual Machine Manager
    https://support.microsoft.com/en-us/help/4086006/renew-certificates-in-system-center-2012-r2-virtual-machine-manager

    Best regards,

    Andy Liu


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, December 31, 2019 2:49 AM