To verify whether the certificates are the same on the OfficeScan (OSCE/Apex One) client and server, refer to KB 1116233.
This issue may occur in one of the following checkpoints:
Possible Causes
- OfficeScan Server NTSG certificate does not exist or it has been expired.
- The Thumbprint of cert was not the same between server and agent.
- The certificate exists in the certificate store "Untrusted Certificates".
Recommended Practices
- Compare the Thumbprints. Refer to the KB article: Verifying whether the certificate thumbprint are the same on the OfficeScan (OSCE) client and server.
- Checkpoint “Cert not expired” or “Cert location”. Refer to the succeeding Checkpoint sections to fix this issue.
-
If the certificate exists in the certificate store Untrusted Certificates (with the same thumbprint as the web host certificate in store Personal or Web hosting), export and backup the certificate, then delete the certificate.
Possible Causes
- OfficeScan Server NTSG certificate is expired.
Recommended Practices
- Open a command line and run: MMC.
- Click File > Add or Remove Snap-ins.
- Select Certificates > Add > Computer Account > Next > Local Computer > Finish > OK.
- Select Console Root > Certificates (Local Computer) > OfficeScan NT > Certificates.
-
Check the Expiration of the OfficeScan Server NTSG.
If the certificate is expired, Create a New OfficeScan Server NTSG Certificate.
- Confirm that the agent has a new cert. Refer to the KB article: Verifying whether the certificates are the same on the OfficeScan (OSCE) client and server.
Possible Causes
- OfficeScan Server NTSG certificate does not exist.
Recommended Practices
- Open a command line and run: MMC.
- Click File > Add or Remove Snap-ins.
- Select Certificates > Add > Computer Account > Next > Local Computer > Finish > OK.
- Select Console Root > Certificates (Local Computer) > OfficeScan NT > Certificates.
-
Check whether there is a certificate with the name “OfficeScan Server NTSG”.
If there is none, Create a New OfficeScan Server NTSG Certificate.