Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LAN Crypt Certificate Generation problem

We removed a user from the database, then re-added them. When we try to Generate a new certificate for this user using the certificate Generation Wizard, the Wizard responds: "Wizard finished without doing anything!  0 certificates created."

In fact it looks like we can't re-generate a new certificate for any existing user either - same problem.

Any ideas?

:1125


This thread was automatically locked due to age.
  • Hi dude,

    can you create a certificate manually? (Double-click the user in the certificates section, press the "create" button in the dialog.)

    Which SGLC administration version do you have? Which MMC version do you use?

    With compliments,

    :1311
  • Not sure if I am in the same place that you refer to because I am not seeing a "create" button.

    But if I go to the properties of the user, the first Tab is the Certificates Tab, and I should be able to select the "New" button to generate a new certificate - however when I select this button nothing happens.

    Everything else is working, I can create new rules and generate new profiles - I just cannot create certificates any longer.

    LAN crypt version: 3.60.0.34

    MMC 3.0 (5.2)

    Thank you for your reply.

    :1328
  • Hi Dude,

    Thomas is clearly the SG LAN Crypt (SGLC) guru in this community. When I attempted this on my lab server, I found that if I deleted the old certificate (p12 file) in the directory where you store the user certificates, it didn't error for me. Please try that and let us know what you find.

    Generally, SGLC will create a new certificate, but give it an incremental number if there is a pre-existing p12 file for that user.

    :1393
  • I have deleted the existing users certificate, but the problem persists.

    Even when I add new users to the database, SGLC will not even generate the first certificate.

    It worked initially when we first set this up, but at this point no certificate generation is possible using SGLC.

    I'm not sure if there is some corruption somewhere that could be fixed by reinstalling, but as I stated everything else is working - just not certificate generation.

    Is there any way to reset/reinstall just the certificate generation component?

    Should I attempt to reinstall over the existing SGLC Admin? Will I loose all of my policies and existing users and certs?

    :1468
  • Hi Dude,

    sorry for the late reply. I did not notice that you answered. My fault.

    Is it possible that we do an online session? I would like to understand what you are doing, and of course I can show you what to do.

    :1744