This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Certificate Manager Service Stopped, fffffffd error

Notice the Sophos Certificate Manager service has stopped. When I attempt to start the service, after 1-2sec, the service stops by itself . Do I need to reinstall SEC?

Secondly I notice on the console, it is showing error: fffffffd. This happen when I reformat the server and reinstall SEC. All other client which was previously protect and managable are now showing this error. I suspect the certificate the server has is different from the client's. Is there a way to enable the server to use back the old certificates?

If you need any log file, please let me know.

:19151


This thread was automatically locked due to age.
Parents
  • If Jak's suggestion doesn't help - did you also export/import the certificates registry keys when reinstalling SEC? And did you reinstall because of the issue with CM or did you reinstall and then the issue cropped up?

    To reinstall (or reincarnate) a SEC you should back up the database, export certificates and EE\Management Tools registry keys and run ExportPrivateStore (and store them away of course). After setting up the base OS and before installing SEC you'd have to import the certificates - otherwise it won't be the "same" server. After installing SEC stop at least the Management Service and the Message Router and restore/import the rest of the stuff. A more detailed description can be found in the Migration Guide.

    If you did not export/import the original certificates the clients either must be re-protected or you could use Jak's script to re-init RMS on the clients.

    Christian

    :19175
Reply
  • If Jak's suggestion doesn't help - did you also export/import the certificates registry keys when reinstalling SEC? And did you reinstall because of the issue with CM or did you reinstall and then the issue cropped up?

    To reinstall (or reincarnate) a SEC you should back up the database, export certificates and EE\Management Tools registry keys and run ExportPrivateStore (and store them away of course). After setting up the base OS and before installing SEC you'd have to import the certificates - otherwise it won't be the "same" server. After installing SEC stop at least the Management Service and the Message Router and restore/import the rest of the stuff. A more detailed description can be found in the Migration Guide.

    If you did not export/import the original certificates the clients either must be re-protected or you could use Jak's script to re-init RMS on the clients.

    Christian

    :19175
Children
No Data