Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Partial chain certificates in SCCM of OfficeScan agents

    • Updated:
    • 27 Apr 2018
    • Product/Version:
    • OfficeScan XG.All
    • Platform:
    • Windows 10
    • Windows 2008 32-Bit
    • Windows 2008 64-Bit
    • Windows 2012
    • Windows 2012 Server R2
    • Windows 2016
    • Windows 7 32-Bit
    • Windows 7 64-Bit
    • Windows 8 32-Bit
    • Windows 8 64-Bit
    • Windows 8.1 32-Bit
    • Windows 8.1 64-Bit
Summary

Agents report having partial chain certificates in System Center Configuration Manager (SCCM) and other events aggregating software. The problem stems from a partial chain due to missing certificate placements in the Trusted Root CA.

OSCE partial chain

OSCE partial chain

Details
Public

To resolve the issue:

  1. Open an MMC console and load the Certificate Manager Snap-In.

    Start MMC Console

    Add Snap In to MMC Console

  2. Load the Certificate Snap-in to the console using Computer Account and Local account.

    Add Snap In

    Add Snap In

    Add Snap In

    Add Snap In

  3. Browse C:\Program Files (x86)\Trend Micro\OfficeScan Client and copy OfcNTCer.dat to a temporary location.
  4. Rename OfcNTCer.dat to OfcNTCer.cer and open it to verify that the issuer is OfficeScan NTSG.

    CNT

    CNT

  5. Import the OfcNTCer.cer into the Trusted Root Certificate Authorities in the MMC Console.

    Import

    Browse

  6. Verify after import that the OfficeScan NTSG certificate is in the Trusted Root Certificate Authorities folder.

    Verify

  7. In the MMC, go to Personal > Certificate Foldersand double-click the ofcsslagent certificate to verify that the chain is now complete.

    Verify

The OfcNTcer.cer is common to all agents and a scripted import to the Trusted Root CA on the SSL agents will correct the chain.

Premium
Internal
Rating:
Category:
Configure; Troubleshoot; Deploy; Install; Upgrade
Solution Id:
1119740
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.