One or more certificates in your Notes ID have expired

HCL Domino Domino Forum
1

I had this issue with around 4 users previously.

“one or more certificates in your Notes ID have expired”

I followed this -

In server data directory you have to copy on a floppy the file server.id.

On your administrator client, certify the file server.id. In normal cases does not require a password.

Then you stop the domino server, replace the old server.id with the new one, restart the server.

  • The above resolved the problem for the 4 users. However now, 3 other users are recieving this error upon logon -

“One or more certificates in your Notes ID have expired. Contact your domino administrator.”

They click OK, then -

“Server error. Your certificate has expired.”

I have yet to try the previous fix, do these symptons raise any alarm bells to any of you?

Anything i am missing, a permanent solution? What exactly is causing these issues?

Thanks again

2

Subject: One or more certificates in your Notes ID have expired

The instructions you list would apply ONLY if the ID that expired was the server ID.

Users need to follow the instructions in the error message to send a copy of their ID file to their admin (i’m guessing you). You do have a copy of cert.id, right? When you receive their emailed Id file, and open it, there will be an option in the Actions Menu for “certify attached ID file”. Take that option, choose your cert ID, follow the prompts. It sends an update email to the user, and they accept using Actions>Accept certificate.

This is notes acting as it is supposed to act. User ID files expire after a time period set when the ID is created. Read up in the Admin help about certificates for user IDs.

3

Subject: RE: One or more certificates in your Notes ID have expired

“The instructions you list would apply ONLY if the ID that expired was the server ID.”

I assumed this, but it was the advice i was given at the time.

“You do have a copy of cert.id, right?”

For our server yes. The users connect through our server to an external Domino server. It appears it is their Certifier which is needed. As if i attempt to certify the ID it states that it will change the parent certifier… !

“This is notes acting as it is supposed to act. User ID files expire after a time period set when the ID is created.”

I was aware of this however the IDs still have another year left so everyone is stumped. I will keep investigating.

Thanks

4

Subject: RE: One or more certificates in your Notes ID have expired

If it is that external server whose cert id expiring, then the ID needs to be sent to someone with THEIR cert.id for updating.

You may want to use the Admin client to examine the IDs more closely to see what is expiring when. To do so, get a copy of the ID and the password for it. Open the Admin client to the “configuration” tab. Expand Tools, then Certification. Click “ID Properties”. Enter password. In the dialog box, expand “Your Identity”, then click “your Certificates”. You can click on each certificate in turn to view the expiration and other information.