SharePoint2010場SharePoint安全令牌服務驗證錯誤

在我們的SharePoint 2010場，我們重申我們的SSL證書，並將更新後，我們開始得到以下錯誤在事件日誌SharePoint2010場SharePoint安全令牌服務驗證錯誤

Event ID 8311 
An operation failed because the following certificate has validation errors:\n\nSubject Name: 
    CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: \n\nErrors:\n\n

RevocationStatusUnknown：吊銷功能無法檢查撤銷證書。

網站通常使用正確的更新證書。即使SharePoint和自定義安全應用程序之間的聲明身份驗證也正常。但是有些服務是給喜歡搜索的嚴重問題在SharePoint中不能正常工作，並給予下列錯誤：

The requested service, 'http://server:32843/f6a9024b8bbe48ebae7e9ffc8f5809dd/SearchService.svc' could not be activated. See the server's diagnostic trace logs for more information. 
Stack trace: 
Server stack trace: 
at System.ServiceModel.Channels.HttpChannelUtilities.ValidateRequestReplyResponse(HttpWebRequest request, HttpWebResponse response, HttpChannelFactory factory, WebException responseException, ChannelBinding channelBinding)

當我在PowerShell中運行Get-SPSite的命令我獲得以下錯誤

Get-SPSite : ID4257: X.509 certificate 'CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US' validation failed by the token handler.

我不是能夠關閉/激活服務器上的任何功能，它會引發證書錯誤。

我已經嘗試以下操作：

1. Recreating the local trust relationship using following commands 
    $rootCert = (Get-SPCertificateAuthority).RootCertificate 
    New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert 

2. Adding "SharePoint Root Authority" certificate to certificate store on each server in the farm, in mmc SharePoint certificates "SharePoint Security Token Service" certificate is displayed under "SharePoint Root Authority" certificate.

來源

2014-11-14 KayEye

您是否找到解決方案？即使我在我的共享點盒子上有這個問題。 – kdurga 2015-01-14 11:27:30

@kdurga尚未找到解決方案。我有一個與微軟開放的支持票，我會在任何時候發佈任何調查結果，只要有任何更新。您是否嘗試過文章中的解決方案\t \t http://support.microsoft.com/kb/2545744 和http://blogs.msdn.com/b/kaushal/archive/2012/10/15/disable-client- certificate-revocation-check-on-iis.aspx？wwparam = 1419439265和http://blogs.msdn.com/b/chaun/archive/2014/05/01/best-practices-for-crl-checking-on- sharepoint-servers.aspx 通常這個問題可以通過上面提到的方法之一來解決。讓我知道這是否有助於你。 – KayEye 2015-01-14 16:21:46

'New-SPTrustedRootAuthority'適用於我，但我必須在農場的所有框上運行'iisreset' – 2015-03-04 15:41:59

我也有類似的問題，我們的症狀是

<EventID>8311</EventID> 
... 
<Data Name="string3">NotTimeValid: Unknown error.</Data>

的根本原因是，該網站浮出水面SSRS（在同一主機上）和它是SSRS（它具有與IIS不同的綁定引擎）證書已過期，但由SharePoint記錄。

來源

2015-12-04 20:50:45

SharePoint2010場SharePoint安全令牌服務驗證錯誤

回答

相關問題