Renew device certificates - How many at once?

SB
Simon Breuer
REWE Systems GmbH

Hi!

We are using device certificates along with a Wi-Fi configuration for authenticating at WPA2 enterprise Wi-Fi.

Due to changes in our PKI environment all of our devices have to change their MobiControl certificate template and ask for a new certificate at our PKI servers.

How many devices at once can be handled by MobiControl for certificate renewal?

Unfortunately we are running in massive problems:

- Waiting endlessly for certificate renewal

- Log entries on deployment servers are full of entries like follows:

**************************************************************************************************************
* Exception: Unable to get certificate as maximum wait time expired before another thread completed request. *
**************************************************************************************************************
[InvalidOperationException: Unable to get certificate as maximum wait time expired before another thread completed request.]
at Soti.MobiControl.Core.BusinessLogic.CertificateManager.GetCertificate(String deviceId, Int32 templateId, Int32 index, CertificateInfo& certificateInfo)
at Soti.MobiControl.DeploymentServerExtensions.CertificateManagerProxy.GetCertificateByTemplateId(String deviceId, Int32 templateId, Int32 index, Int32& certificateId)

**************************************************************************************************************


### 2019-05-31 18:21:00.154 ERROR [197]: GetCertificateByTemplateId called with template id : 2 and device id : 358022073792535

### 2019-05-31 18:21:06.138 ERROR [47]: GetCertificateByTemplateId called with template id : 2 and device id : 358022070661972

### 2019-05-31 18:21:10.638 ERROR [137]: GetCertificateByTemplateId called with template id : 2 and device id : 352960069590254

Do we have a problem with MobiControl or maybe with the PKI infrastructure behind?

6 years ago
Android
ANSWERS
S
Scott
6 years ago

Difficult to tell.  You will probably need to compare the PKI server logs with these to determine if requests are actually getting to them and if responses are being sent but not received by MC.