GlobalSign Cert Expiration

Anyone having issues with the GlobalSign SSL certificate that expired today? Several of my machines are now offline and showing variations of "Error - WebSvc - Failed to connect to web gateway" and "Error - Socket - 216.52.233.171:443 SSL cert error (GlobalSign Organization Validation CA - G2)." [By the way, it's absolutely stupid to not have select/copy functionality in an EVENT LOG.]

It looks like some of our machines updated to a new GlobalSign cert, and the ones that didn't are unable to connect, now. I tried exporting the updated cert from one of the working servers and importing into one of the busted ones, but had no luck.

Anyone running into this today?

Thanks

-Chris

Find more posts tagged with

Comments

thannan

Windows XP - Apply the optional November 2013 Root Certificate Authority Update.

My logs began showing a Certificate Authority error on 1/28. Windows XP had an optional Certificate Authority update available that was released on November 2013. I applied that update and I was working again. I haven't run into this issue on Windows 7 or Windows 8 machines.

2014-02-11 00:02:58.108 - Error - LogMeIn - Socket - 64.94.18.145:80/websvc - 1: CN=GlobalSign Organization Validation CA - G2, O=GlobalSign nv-sa, C=BE; S#=04:00:00:00:00:01:2F:4E:E1:42:F9; trust 0/102.

2014-02-11 00:02:58.108 - Error - LogMeIn - Socket - 64.94.18.145:80/websvc - SSL cert error (/C=BE/O=GlobalSign nv-sa/CN=GlobalSign Organization Validation CA - G2): CA not known

christopherh

Others have gone right to the GlobalSign site to grab their certificates, but the page wasn't working well the day I visited and several of the links were broken. Since I had several machines that were still working, I exported from one of the working copies.

So, depending upon your OS, the steps would roughly be (Server 2003 used for this example):

EXPORT

Find your certificate store. Most system admins would use the mmc, but a regular user might just go to START > Control Panel > Internet Options > Content > Certificates.
Select the Trusted Root Certification Authorities tab and look for your non-expired GlobalSign cert. Select the one you want to export and click the Export button.
Select your format (it shouldn't matter if you're going to/from the same OS). I happened to do .P7B but .CER should be fine as well. Give it a filename and click the Finish button.
Put the certificate somewhere you'll be able to get to it from the non-working LMI station.

IMPORT

On your non-working system with the expired cert, follow step one in the export section to get to your certificate store.
Click the Import button.
Browse and select the cert you exported in the first steps.
Select PLACE ALL CERTIFICATES IN THE FOLLOWING STORE and select Trusted Root Certification Authorities and click Next.
Press the Finish button. If all worked properly, the newly-imported cert should be under the Trusted Root Certification Authorities tab.

RESTART LOGMEIN SERVICES

You could just reboot at this point, but that's not always desirable.
Select Start > Run and type "services.msc" (without quotes) in the box and hit OK.
Scroll down to the LogMeIn services and right-click them and select Restart.

LogMeIn should reconnect after you've restarted the services.

Dmitry1_1

Please, tell how you exported your certificate from one computer to the other as I have had the same problem on 29.01.2014..

christopherh

One thing to note (though maybe it's obvious): You have to stop and restart the LogMeIn services after updating the cert.

DannyMichael

I have to wait to see if this works for me until tomorrow, when I can drive in to access the machines that are down. Hopefully a cert update is all that is needed.

Glad you got it going. I have one working machine so your solution may be helpful to me, as well as others.

christopherh

Thanks for the link. There wasn't much there of help for me, unfortunately. I ended up going back to my original method and just exported the updated cert from one of the working machines.

Thanks

DannyMichael

Check the pinned thread "LogMeIn and Legacy Architecture" and scroll down towards the bottom for your answer.

Quick Links

Join the conversation!

If you found this discussion useful, why not register/sign-in? It only takes a minute to share your feedback, ask a question, or vote for a new feature!