Follow

Site Server status is "Invalid" (Bad or Expired certificates)

Created by: Brendan Bone
Created date:
Last Updated date:

Problem

The Site Server fails to show up in SS Console with a message "Could not connect to Root Site Server".

 

Resolution

  1. On the affected Site Server machine, open Site Server Configuration (typically "C:\Program Files\AccessData\SiteServer\SS_Config.exe")
  2. Take note of what certificates are being used for Secure Communications
    Note: All Site Servers (root & children) must have a local copy of the same certificates.
  3. View the certificates properties and make sure they have not expired.  If they have, the client will need to generate or obtain new valid certificates to replace them.
  4. On the Work Manager responsible for Site Server jobs, open Infrastructure.WorkExecutionServices.Host.exe.config in a text editor (typically "C:\Program Files\AccessData\eDiscovery\Work Manager\Infrastructure.WorkExecutionServices.Host.exe.config")
  5. Find the entries for SSAgentCertFile and SSCommunicationsCertPath

    Note: The Work Manager responsible for Site Server jobs must have a local copy of the certificates.
  6. Verify the value/path for the SSAgentCertFile is using the same certificate as the "Public Certificate" from the Site Server Configuration
  7. Verify the value/path for the SSCommunicationsCertPath is using the same certificate as the "Private Certificate" from the Site Server Configuration
  8. Find the entry for SSRootInstanceHostName
  9. Verify the hostname/value is correct
  10. Find the entry for SSConnectionPort
  11. Verify that matches the "Client Port" from the Site Server Configuration
  12. Save the changes to Infrastructure.WorkExecutionServices.Host.exe.config
  13. Verify firewalls are not blocking any of the ports listed in the Site Server Configuration
  14. Click "Apply" in the Site Server Configuration
  15. Recycle services and confirm all services start correctly

 

Cause

This typically occurs when the Work Manager Certificate and Site Server Certificate do not match or have expired.

Was this article helpful?
0 out of 0 found this helpful
Have more questions? Submit a request

Comments

Powered by Zendesk