Exchange Certificate About to Expire - EvenID 12018

Would there be a way to change the number of days TLS starts complaining about a certificate about to expire. It appears 90 days before and it's due which I feel is too much notice.

Log Name:      Application
Source:        MSExchangeTransport
Date:          7/6/2015 7:52:03 AM
Event ID:      12018
Task Category: TransportService
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      EX1301.domain.com
Description:
The STARTTLS certificate will expire soon: subject: mail1.domain.com, thumbprint: 84B62E798507F49D5208F2FC57F, hours remaining: 2116. Run the New-ExchangeCertificate cmdlet to create a new certificate.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchangeTransport" />
    <EventID Qualifiers="49156">12018</EventID>
    <Level>2</Level>
    <Task>12</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2015-07-06T13:52:03.000000000Z" />
    <EventRecordID>1753189</EventRecordID>
    <Channel>Application</Channel>
    <Computer>EX1301.domain.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>mail1.packersplus.com</Data>
    <Data>B62E798507F49D5208F2FC57F</Data>
    <Data>2116</Data>
  </EventData>
</Event>



  • Edited by BTRowdy1 8 hours 3 minutes ago
July 6th, 2015 2:08pm

Hi,

Based on my knowledge, I can't find any method to control the time when the event 12018 generated for certificate expired warning.

In your scenario, the event logs indicates that your ceritifcate would remain working for 2116 hours (about 35 days). Please remember to renew this certificate before the expired date.

Regards,

Free Windows Admin Tool Kit Click here and download it now
July 7th, 2015 5:31am

2116 / 24 = 88 days

Only 88 more days to put up with the alerts in SCOM every hour... YAY. 90 days seems a little excessive for this alert. I wish it was configurable. I'm not renewing my expensive starcert 90 days ahead of time. 

Time to quiet the alert in SCOM!

July 7th, 2015 7:24pm

2116 / 24 = 88 days

Only 88 more days to put up with the alerts in SCOM every hour... YAY. 90 days seems a little excessive for this alert. I wish it was configurable. I'm not renewing my expensive starcert 90 days ahead of time. 

Time to quiet the alert in SCOM!

Absolutely, you can turn the rule down in SCOM, just need to keep a reminder set somewhere to renew it before the end date... ;)
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2015 7:29pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics