Welcome to TechNet Blogs Sign in | Join | Help

The Official SBS Blog

The official blog for SBS support and product group communications.

News

  • Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. This weblog does not represent the thoughts, intentions, plans or strategies of Microsoft. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm
The CEICW Certificate Generator Will Be Out Of The Office On February 29, 2008

[Today's post comes to us courtesy of James Frederickson and Justin Crosby]

Running the CEICW on SBS 2003 on February 29, 2008 and choosing to create a certificate may fail on Secure Web Site Configuration as seen below:

clip_image002

Text of error:

An error occurred while configuring a component.
To continue with the wizard and configure remaining components, click OK.
To end the wizard without configuring the remaining components, click Cancel.
[OK] [Cancel]

You will also see the following errors in icwlog.txt:

Web server name: mail.contoso.com
CCertCommit::ValidatePropertyBag returned OK
Opening the cert store returned OK
Reading the computer name returned OK
Reading the fully qualified server name returned OK
*** Creating the self signed cert returned ERROR 80070057
*** CCertCommit::EnableSSL returned ERROR 80070057
*** CCertCommit::CommitEx returned ERROR 80070057
calling GetBOConnector ().
Error 0x80072030 returned from call to GetBOConnector().

The reasons for this issue is that the when you have the CEICW create a self-signed certificate for your webserver,  it uses the current date +5 years.  Since there is not a February 29th in the year 2013 the wizard uses an invalid expiration date, which in turn causes the wizard to fail.

To avoid this issue choose the option to "Do not change current Web server certificate" when running the CEICW. 

The CEICW will resume normal operation the next day, March 1st, 2008.

Posted: Tuesday, January 15, 2008 1:27 PM by SBS Bloggers

Comments

JamesNT said:

Thanks for the heads up.  I'm glad leap seconds don't cause this kind of trouble!

JamesNT

# January 15, 2008 7:43 PM

The Official Blog of the SBS "Diva" said:

The Official SBS Blog : The CEICW Certificate Generator Will Be Out Of The Office On February 29, 2008

# January 15, 2008 10:07 PM

MVPs said:

The Official SBS Blog : The CEICW Certificate Generator Will Be Out Of The Office On February 29, 2008

# January 15, 2008 10:58 PM

Girish's Graffiti said:

:) To know more check this out; The CEICW Certificate Generator Will Be Out Of The Office On February

# January 16, 2008 5:46 AM

Moloy Tandon's Blog - Ask Me said:

For a detailed understanding of the issue go thru the following blog post   The CEICW Certificate

# January 17, 2008 8:20 AM

Tony Su said:

That's really amusing!

I wonder if this is the first time this has happened or if 4 years ago no one decided to do anything about it (can probably be fixed with a single line of code to add a day if the date doesn't exist)

# January 17, 2008 4:11 PM

Forefront & Security Blogs said:

Das Jahr 2000 und die gefürchteten Probleme durch die Jahreszahl haben wir erfolgreich überstanden. Auf

# January 19, 2008 8:19 AM

The Official Blog of the SBS "Diva" said:

The Official SBS Blog : The CEICW Certificate Generator Will Be Out Of The Office On February 29, 2008

# February 28, 2008 10:41 PM

MVPs said:

The Official SBS Blog : The CEICW Certificate Generator Will Be Out Of The Office On February 29, 2008

# February 28, 2008 10:51 PM

Nick Whittome - The Naked MVP said:

Aghghghghgh… That’ll teach me to skip over a blogpost! I just lost an hour of my life to

# February 29, 2008 2:00 PM

Tales from the Crypto said:

A semi-hobby of mine is that of date- and time-related issues with computers. Something that we all take

# February 29, 2008 9:47 PM
New Comments to this post are disabled
Page view tracker