This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.

You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

Appinsight for Exchange Certificate error

christopher.t.jones123 over 8 years ago

My appinsight has done this twice.

i'll receive an error stating that its status is unknown because the server certificate has expired, after troubleshooting i am unable to clear the error, but when i come back in the next day Appinsight is polling again and the error is no longer there.

both exchange servers have self signed certs from solarwinds that were issued during the auto configure that solarwinds does when first adding appinsight to them.

i have reconfigured them using the auto configure, but the error still shows up, then in the middle of the night they clear.

any thoughts on what this could be.

Top Replies

0 aLTeReGo over 8 years ago

If the certificate had expired the component should not be in an "unknown" state. It sounds more like SAM is unable to gather information related to the SSL Certificate at all, resulting in that component going into an Unknown state. If SAM believed the certificate was expired it should report this state as "Critical". I would recommend placing the application into "Debug" mode and gather diagnostics immediately after you receive an alert that it has gone into an "Unknown" state. Once completed, then please open a case with support so we can determine the cause of the Certificate Date Expiration Monitor reporting an "unknown" status.
Cancel
Vote Up 0 Vote Down

Cancel
0 christopher.t.jones123 over 8 years ago in reply to aLTeReGo

ok i will make sure i do this the next time it occurs. thank you for the guidance
Cancel
Vote Up 0 Vote Down

Cancel
0 christopher.t.jones123 over 8 years ago

on another post i saw that solarwinds polls for certificates once a day, is there any way to increase this? or force a certificate poll?
Cancel
Vote Up 0 Vote Down

Cancel
0 aLTeReGo over 8 years ago in reply to christopher.t.jones123

Clicking "Poll Now" on the Application Details Management Resource should force a poll of all components in the application. Keep in mind It may take as long as 10-15min to poll all components depending upon how many sites and application pools you have. A heavier handed approach would be to remove the application and reassign it again.
Cancel
Vote Up 0 Vote Down

Cancel
0 christopher.t.jones123 over 8 years ago

I have managed to catch it in the act for a screenshot. I have now put the application in debug mode for both of my Exchange servers that this is doing it on, I will also submit a ticket.
Cancel
Vote Up 0 Vote Down

Cancel
0 christopher.t.jones123 over 8 years ago

this is the new error that has occurred
Cancel
Vote Up 0 Vote Down

Cancel
0 tomasv over 8 years ago in reply to christopher.t.jones123

It looks like some connection issue, Orion server is not able connect to the Exchange.
Is that permanent issue or does it occur intermittently?
What does it say, when you press test connection on application edit page?
Cancel
Vote Up 0 Vote Down

Cancel
0 christopher.t.jones123 over 8 years ago in reply to tomasv

this occurs intermittently, when i press test connection it always says test connection. I have verified on the server that the account being used as the appropriate permissions per the documentation from solarwinds. i have a support case in with solawinds per the suggestion from aLTeReGo and will post the results as soon as we have this resolved. Thanks for the suggestions and input though.
Cancel
Vote Up 0 Vote Down

Cancel
0 aLTeReGo over 8 years ago in reply to christopher.t.jones123
Reflecting back on this issue, I have seen similar problems occur when there is an expired certificate installed on the server. Have you opened the system certificate store for the local system and verified that none of the certificates are expired on the Exchange server?
The following KB article was spawned as a result of some of the issues we've seen when Exchange is configured to use an expired certificate.
SolarWinds Knowledge Base :: Invalid Exchange certificate assigned to website
Cancel
Vote Up 0 Vote Down

Cancel
0 christopher.t.jones123 over 8 years ago in reply to aLTeReGo

i have verified that the certificate is not expired
The support desk stated that this is being caused by my Database not set to automatically defrag, so he provided me the steps on Friday to complete it.
After I set it up to automatically defrag on friday i decided to let it poll over the weekend. I came in this morning and both my Exchange Appinsights are in an unknown state, with the same error. According to Appinsight this occurred at 8pm lat night and has been in an unknown state since then, i have attempted to have it conduct a poll, but it is still returning that the SSL Certificate is expired. I have replied to solarwinds support and will update this as well.
Cancel
Vote Up 0 Vote Down

Cancel