Changes for page Agenten- und Consolestart
Last modified by Steffi F on 2025/09/29 13:34
Summary
-
Page properties (1 modified, 0 added, 0 removed)
Details
- Page properties
-
- Content
-
... ... @@ -22,7 +22,6 @@ 22 22 23 23 == Solution 1: Check the certificates to make sure they are valid. == 24 24 25 -(% class="wikigeneratedid" %) 26 26 27 27 ~1. Go to the ACMP Client folder, which is located in the Program Files (x86) folder, and right-click on ACMPClientService.exe to open its properties. 28 28 2. Then, switch to the Digital Signatures tab. ... ... @@ -88,7 +88,8 @@ 88 88 89 89 == Solution 2: Check the registry key and change the group policy if necessary. == 90 90 91 - In this problem case, the following registry key is usually set: 90 +In this problem case, the following registry key is usually set: 91 + 92 92 Go to "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot" and change the setting for "DisableRootAutoUpdate" to "1." 93 93 94 94 {{aagon.infobox}} ... ... @@ -95,7 +95,7 @@ 95 95 The value (1) means that automatic certificate updates are disabled. You can change the value from (1) to (0) here, but you must also change the group policy for the change to take effect. If the setting in the group policy is wrong, it will replace the new value in the registry key. 96 96 {{/aagon.infobox}} 97 97 98 -2. ierenSiein denGruppenrichtlinien-Editorzu//Administrative//Vorlagen> System > Internetkommunikationsverwaltung > Internetkommunikationseinstellungen.//98 +2. Navigate to the Group Policy Editor to //Administrative// //Templates > System > Internet Communication Management > Internet Communication Settings.// 99 99 100 100 {{figure}} 101 101 [[image:GPO.PNG||data-xwiki-image-style-alignment="center"]] ... ... @@ -105,9 +105,9 @@ 105 105 {{/figureCaption}} 106 106 {{/figure}} 107 107 108 -3. Gehen Sie mit einemDoppelklickindieEinstellungender GPO //AutomatischesUpdate von Stammzertifikatendeaktivieren.//108 +3. Double-click to open the settings for the GPO //Turn off Automatic Root Certificates Update.// 109 109 110 -4. Setzen Sie das Häkchenauf//Deaktiviert//.Mitdieser EinstellungaktivierenSiedieautomatischeAktualisierung der Zertifikate.110 +4. Check the box //Disabled//. This setting enables automatic certificate updates. 111 111 112 112 {{figure}} 113 113 [[image:6.5_Use Case Zertifikat_GPO aktiviert.png||data-xwiki-image-style-alignment="center"]] ... ... @@ -117,13 +117,11 @@ 117 117 {{/figureCaption}} 118 118 {{/figure}} 119 119 120 +5. You may need to restart the system for the ACMP Client service to start again. 120 120 121 - 5.Ggf. muss einSystem-Neustartdurchgeführtwerden,damitder ACMP ClientDienst wiederstartet.122 +== Solution 3: Export and import valid certificates manually. == 122 122 123 -== **Lösung 3: Manueller Export und Import von validen Zertifikaten** == 124 - 125 -Sie können auch einen manuellen Lösungsansatz verfolgen, indem Sie einen Export von den gültigen Zertifikaten von einem Gerät durchführen und diese auf dem betroffenen System importieren. 126 - 127 -~1. Führen Sie in einer administrativen CMD folgenden Befehl aus: certutil.exe -generateSSTfromWU c:\temp\root.sst 128 -2. Führen Sie dann folgenden Befehl in einer administrativen PowerShell auf dem betroffenen Gerät aus: Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root -FilePath "C:\temp\root.sst" 129 -3. Ggf. muss ein System-Neustart durchgeführt werden, damit der ACMP Client Dienst wieder startet. 124 +You can also try a manual fix. Export the valid certificates from one device and import them to the affected system. 125 +~1. To generate a SST from a WU, run the following command as an administrator: certutil.exe -generateSSTfromWU c:\temp\root.sst 126 +2. Then, run the following command in an administrative PowerShell on the affected device: The path to the certificate is "Cert:\LocalMachine\Root" and the file path is "C:\temp\root.sst". 127 +3. You may need to restart the system for the ACMP client service to start again.