Answered by:
Default certificate expired for Enterprise service bus for Windows Server (ESB)

Question
-
We have been using service bus for windows server 1.1 from a long time. Suddenly we came across a problem where ESB services stopped working and we got to know that the the certificate which was auto generated got expired. We are not able to find a relevant information which will solve our problems. We tried few options but we encountered lot of different issues such as:
1. We are not able to run any command and getting following error:
Certificate requested with thumbprint not found in the certificate store.
2. We thought of reinstalling the ESB but when we try to use "Leave farm" option to uninstall then we are not able to open ESB configuration screen.
Microsoft.ServiceBus.ConfigWizard has stopped working
I have got new certificate imported in local store so can you please tell me how to use this new certificate in ESB(instead of default one)?
I hope we will get rid of all problems if the certificate issue is resolved. We are facing this issue in our non production environment. But this issue is very critical as we don't want to run into similar issue on production so we want to know the solution to update the certificate and also how to renew the existing certificate(for production).
Awaiting your early response.
Thanks in advance,
-Ganesh
- Moved by KetanChawda-MSFTMicrosoft employee Wednesday, November 21, 2018 5:23 AM
Friday, November 16, 2018 9:25 AM
Answers
-
Hello,
if you talk about Oracle's ESB (https://www.oracle.com/technetwork/articles/soa/ind-soa-esb-1967705.html) then you should ask here: https://support.oracle.com/
- Edited by Guido Franzke Wednesday, November 21, 2018 7:11 AM
- Proposed as answer by Richard MuellerMVP, Banned Wednesday, November 21, 2018 5:25 PM
- Marked as answer by Dave PatrickMVP Saturday, November 24, 2018 1:13 PM
Wednesday, November 21, 2018 7:10 AM -
Hello Ganesh,
Please check the below article if that helps by the time some ESB expert respond.
http://www.gi-architects.co.uk/2016/10/renew-deleted-expired-certificate-for-windows-service-bus-2/
- Proposed as answer by Richard MuellerMVP, Banned Wednesday, November 21, 2018 5:25 PM
- Marked as answer by Dave PatrickMVP Saturday, November 24, 2018 1:14 PM
Wednesday, November 21, 2018 7:16 AM -
Hello,
Finally after sometime I could do something on this issue sucessfully.
I was not able to even uninstall bus so I changed the date of the server(not a good solution though) and I was able to open configuration wizard after this and I left the farm. Then I could uninstall the service bus from control panel.
Then I installed fresh instance of the service bus on the same server. Just to avoid the same problem on production I tried one thing on new service bus:
1. While installing service bus I used custom certificate (lets say thumbprint XYZ).
2. I installed second certificate (thumbprint PQR)
3. Then I used following commands:
a. Stop-SBFarm
b. Set-SBCertificate –FarmCertificateThumbprint PQR –SkipKeyReEncryptionc. Update-SBHost
4. Finally I was able to reinstall and update certificate thumbprint. We can now safely update the same on prod before it gets expired.
Thanks
Ganesh
- Marked as answer by Dave PatrickMVP Monday, December 10, 2018 3:18 PM
Monday, December 10, 2018 3:16 PM
All replies
-
Hello Ganesh,
Please check the below article if that helps
How to renew an expired certificate
Your query doesn't seems to be related to Azure Service Bus hence moving it to "Where is the Forum For" for the experts to redirect you to the correct forum.
Wednesday, November 21, 2018 5:22 AM -
Ok Thanks...sorry for the inconvenience. Awaiting to get the right information.Wednesday, November 21, 2018 6:08 AM
-
I tried options you provided. I am not able to run any command at all and getting me error:
Certificate requested with thumbprint not found in the certificate store.
Wednesday, November 21, 2018 6:32 AM -
Hello,
if you talk about Oracle's ESB (https://www.oracle.com/technetwork/articles/soa/ind-soa-esb-1967705.html) then you should ask here: https://support.oracle.com/
- Edited by Guido Franzke Wednesday, November 21, 2018 7:11 AM
- Proposed as answer by Richard MuellerMVP, Banned Wednesday, November 21, 2018 5:25 PM
- Marked as answer by Dave PatrickMVP Saturday, November 24, 2018 1:13 PM
Wednesday, November 21, 2018 7:10 AM -
Hello Ganesh,
Please check the below article if that helps by the time some ESB expert respond.
http://www.gi-architects.co.uk/2016/10/renew-deleted-expired-certificate-for-windows-service-bus-2/
- Proposed as answer by Richard MuellerMVP, Banned Wednesday, November 21, 2018 5:25 PM
- Marked as answer by Dave PatrickMVP Saturday, November 24, 2018 1:14 PM
Wednesday, November 21, 2018 7:16 AM -
Hello,
Finally after sometime I could do something on this issue sucessfully.
I was not able to even uninstall bus so I changed the date of the server(not a good solution though) and I was able to open configuration wizard after this and I left the farm. Then I could uninstall the service bus from control panel.
Then I installed fresh instance of the service bus on the same server. Just to avoid the same problem on production I tried one thing on new service bus:
1. While installing service bus I used custom certificate (lets say thumbprint XYZ).
2. I installed second certificate (thumbprint PQR)
3. Then I used following commands:
a. Stop-SBFarm
b. Set-SBCertificate –FarmCertificateThumbprint PQR –SkipKeyReEncryptionc. Update-SBHost
4. Finally I was able to reinstall and update certificate thumbprint. We can now safely update the same on prod before it gets expired.
Thanks
Ganesh
- Marked as answer by Dave PatrickMVP Monday, December 10, 2018 3:18 PM
Monday, December 10, 2018 3:16 PM