Hi Richard,

Thank you for posting in SOTI Central.

Can you clarify, you're using a CA within your Add Device Rule and the actual CA root/intermediary certificate expired? And you're requesting details on how to mitigate the problem of an expired 3rd party certificate?

Regards,

Hi Richard,

Following on this thread, Please answers the questions asked in above post and if the issue is resolved. I would request you to post answers .So, that others can benefit from th solution.

Hi Technical Support apologies for the delay in my reply. 

I am not trying to mitigate the issue of a expired certificate, I will attempt to explain a little better....

If I navigate to the SOTI Admin Interface and highlight my deployment server its Global Settings has a property of 'Certificate Authorities' 2 of this properties configurations are the upload of the Trusted Root Certificate and an Enrollment Certificate, it is the expiration of Enrollment Certificate I am trying to capture and monitor 

If i navigate to the Soti Admin utility it has a certificate health check which displays the status of all other certificates(listed below) except the 'Enrollment Certificate' 

as this certificate is created in a normal manner i looked for it within the normal windows certificate locations but could not find it 

Ultimately i would just like to be aware of its approaching expiration  but with it not bein glisted either on the computer or within the health check i am unable to do so 

Hi Richard,

Thanks for posting in SOTI CENTRAL.

Please follow the process below if you are looking for expiration of Mobicontrol root and Intermediate Certificate.

1. Select Run from the Start menu, and then enter mmc.

   The MMC appears.

2. From the File menu, select Add/Remove Snap In.

   The Add or Remove Snap-ins window appears.

3. From the Available snap-ins list, choose Certificates, then select Add.

   

4. In the Certificates snap-in window, select Computer account, and then select Next.

   Optionally, you can select My user account for the current user or Service account for a particular service.

    Note

   If you're not an administrator for your device, you can manage certificates only for your user account.

5. In the Select Computer window, leave Local computer selected, and then select Finish.

6. In the Add or Remove Snap-in window, select OK.

   

7. Optional: From the File menu, select Save or Save As to save the MMC console file for later use.

8. To view your certificates in the MMC snap-in, select Console Root in the left pane, then expand Certificates (Local Computer).

   A list of directories for each type of certificate appears. From each certificate directory, you can view, export, import, and delete its certificates.

Please let me know if you have any additional questions.

Hi, 

Unfortunately im not sure how to word it any other way.

It is the 'Enrollment Certificate' that was created by us and uploaded into the SOTI Admin Interfaces Global Settings 'Certificate Authorities'  property field I  am trying to find,  as per my last post it cannot be found in the normal location of the certificates snapin under either the local computer or any of the service accounts 

Hi Richard Scott,

Following up on this thread, thank you for rephrasing your inquiry. Please try to find the expiration of Enrollment Certificate on one of the devices on which the certificate is installed.

Go to Device -----> Navigate to Security Tab----- > It will show all the certificates installed on the device as shown below.

Also, if the above  helped you in finding the Expiration, I would request you to mark the particular comment as "is solution", so others may benefit from this information.