Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials
Store

Monitoring MS Server Certificate Services

Hello twack,

My organization has an internal Windows CA server and handles end user and internal application server certicates for various systems. How do I monitor the issued certificates from within Solarwinds and get alerted when a certificate is or about to expire?

Find more posts tagged with

Accepted answers

All comments

rob.hock

SAM has a built in template for monitoring certification validation: http://www.solarwinds.com/solutions/ssl-certificate-monitor.aspx

ctavares

Hello,

Thank you for the response. The SAM monitor works for the end point with the cert but I want to monitor the actual Certificate Authority. The only way I see this being possible is to monitor the event logs. Is there another way to do this?

Thanks,

Carlos Tavares, Jr.

aLTeReGo

If you're using Windows Certificate Services the root CA certificate I believe is used on the Certificate Services web interface. Have you tried monitoring that with SAM's SSL Certificate Expiration Date Monitor?

ctavares

Yes I am using the windows root CA in my domain and Yes I have tried the monitor. It appears to be geared more towards if you are using web services (80, 443, or whatever port) to monitor web site ssl not the actual Windows Certificate Authority certs. It doesn’t work for me unless I just monitor the endpoint devices SSL certs for when they expire instead of directly from the root CA, which is what this monitor is gear for like I said.

A root CA monitor would be ideal. So far from what I can see is the root CA server, when a cert expires, will generate event log errors or warnings. Solar winds can monitor that and generate alerts but I would like to monitor the root CA for certs if possible.

Thanks,

Carlos Tavares, Jr.