Sysadmins Struggle with TPM Certificate Issues Late Friday
23 posts across 4 communities in the last 60 days; 70% from r/sysadmin.
“I generally don't have that problem. Our users are pretty good about letting everyone know what's going on, and if they aren't they know I'll be glad to show them how to do it themselves. a I NEVER set anyone's status myself. But then, I've always been the type to let folks know…”
“With 35 certs treat this as n automation problem Hell I wouldn't manually renew and install one cert let alone 35”
“Certificate problem still there? I have renewed the certificate and setup certbot for autorenewal”
Multiple sysadmins are experiencing frustrating issues related to TPM certificates, particularly on a Friday evening. These problems lead to PC malfunctions and delays in gaming, causing significant annoyance and requiring troubleshooting.
SOURCES (30)
“I generally don't have that problem. Our users are pretty good about letting everyone know what's going on, and if they aren't they know I'll be glad to show them how to do it themselves. a I NEVER set anyone's status myself. But then, I've…”
XPosting submitted by /u/Potential_Scratch981 [link] [comments]
Good call out mate. Good luck to everyone with your 26H2 rollouts.
“With 35 certs treat this as n automation problem Hell I wouldn't manually renew and install one cert let alone 35”
“What's everyone doing to accomodate the shorter and shorter certificate validation periods? My org has about 35 certs on various servers for quite a few things. If we eventually get to the target 47 day cert lifespan by 2029, it's going to be a nearly full-time job for someone to renew certs if we keep doing it the way we've always done it. Add in the challenges created by transition to R1 certs and I don't think that our IT management has any idea what they're in for. As it”
FWIW, Microsoft technically fixed it but also didn't fix it.
“No, that's not what I was talking about. They do simulate it here specifically for blackout scenarios or cyber attacks. Maintenance doesn't take hours. And it was both times during the day.”
Always backup your config and have console cable ready when you mess up.
“I know that pain intimately. I always try to warn the nursing manager or ward clerk well in advance if there's even a remote chance of something going wrong. Also **** Epic.”
“I did something like that but it was replacing a certificate of the software we used to remote in, while I was remoted in.”
You're a god damn champion. I had found and fixed the issue already but was seeing if this info made it to the subreddit. Wish I saw this yesterday lol.
“Certificate problem still there? I have renewed the certificate and setup certbot for autorenewal”
“We went all day without an interruption and then it just happened now - we force closed the TermService via powershell knowing the PID ahead of time. We were able to restart the service. BUT - when we tried to log in - we got the "loading virtual machine" message and it just sits there - We ended up doing a hard reset of the VM”
“Because I finally had something I'd checked. If the premise is wrong, this is where I find out.”
“Yeah just the tip of the iceberg, don’t forget all the cert stores owned by random Java apps all over the palace”
“we've had a view TPM issues after this months updates (a surface firmware update comes through, also 1 acer laptop effected, but is home user, so ignoring somewhat) issue seems to be be , firmware is updated, machine is rebooted, failure, upon boot the TPM is no longer detected if instead firmware is updated, machine is shutdown (proepr shutdown not hybrid), success, upon boot the TPM is normally detected no need to reset the tpm or anything, once it was properly detected everything returned”
“Hell I didn't even know there was a 26H1. And even if it was the right move, on a Friday especially on a holiday weekend?”
Please don't use the C****x word; I have PTSD and I'm easily triggered.