Event 64 Error Message about expired thumbprint certificate

phrab · 28 Sep 2019

I just started getting the message attached below:

Event 64 Error Message about expired thumbprint certificate-thumbprint-certificate.png

I read the older threads, but things seem to have changed. The Microsoft site https://docs.microsoft.com/en-us/pre...ectedfrom=MSDN says it hasn't updated the directions & my console root doesn't have a "personal" option. I don't want to do something without knowing what to do.

I did run Powershell to get more information, but I'm afraid I don't understand it. It said:
Subject : CN=F90019BD9C90462DIssuer : CN=XBL Client IPsec Issuing CAThumbprint : 8A081123B949018CEF2B6FCC8CE0F2FF0D1DFEF3FriendlyName :NotBefore : 9/22/2019 4:25:51 PMNotAfter : 9/23/2019 4:25:51 PMExtensions : {System.Security.Cryptography.Oid, System.Security.Cryptography.Oid, System.Security.Cryptography.Oid}

When I ran another PS command that was mentioned in another thread, it returned:
PS C:\Users\Phil> dir cert:\LocalMachine\my | Where-Object { $_.HasPrivateKey } | Foreach-Object { write-host $_.thumbprint - $_.subject }8C3603ADD9679756B426504FCCA4F03659DC83AA - CN=NVIDIA GameStream Server8A081123B949018CEF2B6FCC8CE0F2FF0D1DFEF3 - CN=F90019BD9C90462D

Can anyone tell me, step by step, how to track down & renew the thumbprint certificate?
Thank you in advance!

phrab · 16 May 2021

After getting numerous event error 64 messages about expired certificate: Date: 5/15/2021 9:11:12 AM
Type: Warning
Event: 64
Source: Microsoft-Windows-CertificateServicesClient-AutoEnrollment

Certificate for local system with Thumbprint d4 18 c7 80 c5 5e 88 dd 72 b8 24 89 8d 7e 83 59 fe d9 b3 9a is about to expire or already expired.

I did the following:
I went to https://docs.microsoft.com/en-us/pre...ectedfrom=MSDN
which said to:
1. Click Start, type mmc, and then press ENTER.

2. If the User Account Control dialog box appears, confirm that the action it displays is what you want, and then click Continue.

3. On the File menu, click Add/Remove Snap-in, click Certificates, and then click Add.

4. Select the user or computer account that logged the error, and click Next. [I selected local computer]

5. Click Finish, and then click OK.

6. In the console tree, click Certificates - Current User or Certificates (Local Computer), and then click Personal. [It showed xbl etc, which had the footprint]

7. In the console tree, double-click Certificates, double-click Personal, and then click Certificates.

8. Locate the certificate with the thumbprint listed in the event log message.
Right-click the certificate, and select one of the Renew Certificate options to start the Certificate Renewal Wizard and renew the CA certificate.

[I was unable to renew the certificate because it asked for some type of key & I didn’t know what that was. Since it was XboxLive (started with XBL), I decided to delete the certificate, since I couldn’t renew it. I first saved it as "C:\Users\Phil\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Console4.msc"]

Today, 5/15/2021, there was no Event Error 64. I've decided to post this in case anyone else gets the same error.