Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2

hi guys,

i need event ids.

event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before?

event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages.

event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do.

if give tips , answers, great. in advance.

hi,

event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before?

i assume these computers not cas. can ignore event id 64, or delete expired certificates , key sets.

for more detailed steps, please refer thread:

how remove certificate private key

https://social.technet.microsoft.com/forums/en-us/a016c0c1-131f-4deb-b95e-a8876fa2cbeb/how-to-remove-a-certificate-with-the-private-key-?forum=winserversecurity

event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages.

ignore it:

event id 77 — ad cs policy module processing

https://technet.microsoft.com/en-us/library/cc774505%28v=ws.10%29.aspx?f=255&mspperror=-2147217396

event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do.

change value of registry key dimsroamingmaxnumtokens under

hkcu\software\policies\microsoft\cryptography\autoenrollment.

more information you:

credential roaming

http://social.technet.microsoft.com/wiki/contents/articles/11483.credential-roaming.aspx#deploying_group_policy_for_credential_roaming

best regards,

amy

---

please remember mark replies answers if , un-mark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com.

Windows Server  >  Windows Server General Forum