Details of the event with ID 35 of the source Microsoft-Windows-NetworkDeviceEnrollmentService
| Event Source: | Microsoft-Windows-NetworkDeviceEnrollmentService |
| Event ID: | 35 (0x23) |
| Event log: | Application |
| Event type: | Error |
| Symbolic Name: | EVENT_SCEP_RA_CLOSE_TO_EXPIRE |
| Event text (English): | At least one of the certificates for the Network Device Enrollment Service will expire soon. Check the validity period for both the encryption and signing certificates. Renew any certificates that are nearing the end of their validity period and restart the service. |
| Event text (German): | Mindestens ein Zertifikat für den Registrierungsdienst für Netzwerkgeräte wird bald ablaufen. Prüfen Sie den Gültigkeitszeitraum für sowohl die Verschlüsselung als auch die Signaturzertifikate. Erneuern Sie alle Zertifikate, deren Gültigkeitszeitraum bald abläuft, und starten Sie den Dienst neu. |
The Network Device Enrollment Service (NDES) provides a way for devices that do not have an identifier in Active Directory (for example, network devices such as routers, switches, printers, thin clients, or smartphones and tablets) to request certificates from a certification authority. For a more detailed description, see the article "Basics: Network Device Enrollment Service (NDES) ".
Description
Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the application of rule sets to realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can be downloaded via GitHub and used free of charge. Professional maintenance is also offered.
Occurs when the Registration Authority certificates for the NDES server are about to expire and there is no replacement yet.
Security assessment
The security assessment is based on the three dimensions of confidentiality, integrity and availability.
Since in most cases the Registration Authority certificates of the NDES server are requested and renewed manually , an alert should be issued in any case to avoid any impact on availability.