Should i delete expired certificates in the keychain on my iMac

Since installing Yosemite Facetime & iMessage will not accept my apple password. message states I should contact apple with customer code 4397-0036-7181. On looking in my keychain a lot of certificates have expired. Should I delete them?

You should delete expired certificates, but that alone won't solve your problem.
If you're trying to sign in to FaceTime, try to sign in to iMessage in the Messages application, or vice versa.
Otherwise, do as the alert directs. According to reports, you won't be charged for the support call if you select "Apple ID"—not the hardware model—as the product you're asking about, and cite the "customer code" in the alert as the "validation code" when you speak to the Apple representative. I can't confirm.

Similar Messages

Deleting Expired certificates from IOS CA

I have been looking at how to delete expired certificates from an IOS CA. I have seen the command "crypto pki server trim" but this command appears to only apply to certificates in the CRL list. Does anyone know if there is a similar command to just delete expired certificates rather than ones that have been revoked first? It would be a hassle to have to manually go through each one.

Hi Yerko,
Yes you can. Please have a look at the below link:
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_pki/configuration/15-mt/sec-pki-15-mt-book/sec-cert-enroll-pki.html
Please visit the below section.
Configuring Cut-and-Paste Certificate Enrollment
SUMMARY STEPS
1.    enable
2.    configure terminal
3.    crypto pki trustpoint name
4.    enrollment terminal pem
5.    fingerprint ca-fingerprint
6.    exit
7.    crypto pki authenticate name
8.    crypto pki enroll name
9.    crypto pki import name certificate
10.    exit
11.    show crypto pki certificates
Regards,
Kanwal
Note: Please mark answers if they are helpful.

How do I delete duplicate icons from the dock of an Imac 8.1?

How do I delete duplicate icons from the dock of an Imac 8.1?

No dragging to trash doesn't work. Just keep dragging them off. If they are stacked, which shouldn't happen, then when you delete one the other is still there.
Just how did you get duplicates? Did you put them there? If not then you have other problems and I'm not sure how to correct it.

Can i delete expired certificates?

hello,
i just did an "archive and install" last night. noticed i had some certificates that were expired--the expiration date was before i even bought my computer--and for many of them, there are current versions. the certificates are:
GTE CyberTrust Root
TC TrustCenter Class 0-4 CA
i figure since the certificates expired even before i bought my computer, they can't be tied to anything important, and they seem to have updated versions of them. (except for GTE CyberTrust Root; the closest non-expired certificate i have is GTE CyberTrust Global Root.)
so can i delete the expired ones?

thanks!
i'm a little paranoid about deleting any certificates now because it was my deletion of the entire x509 anchors that led to my archive and install in the frist place...

Should I delete redundant images in the "All Images" folder?

Not sure if this is the right place to post this but...
The "All Images" folder contains so many redundant images, should I clean up those redundant files?
If I do, will it delete them from the individual docs and other files where the images are associated?

be careful deleting anything from there. this smart search shows among other things all the pics in your iphoto library including thumbnails and such. so what may seem like redundant things are actually not. and remember, this is not a real folder. this is a smart search. deleting anything from there will delete the originals.

ISE 1.2 / WLC 5508 EAP-TLS expired certificate error, but wireless still working

Hi I have a customer that we've deployed ISE 1.2 and WLC 5508s at. Customer is using EAP-TLS with and everything appears to setup properly. Users are able to login to the network and authenticate, however, frequently, I'm getting the following error in ISE authentication logs:
12516 EAP-TLS failed SSL/TLS handshake because of an expired certificate in the client certificates chain
OpenSSL messages are:
SSL alert: code=Ox22D=557 : source=local ; type=fatal : message="X509
certificate ex pi red"'
4 727850450.3616:error.140890B2: SS L
rOYbne s: SSL 3_ G ET _CL IE NT _CE RT IF ICAT E:no ce rtific ate
relurned: s3_ srvr.c: 272 0
I'm not sure if this is cosmetic or if this is something that I should be tracking down. System isn't in full production yet, but every client seems to be working and there is no expired cert in the chain. Any ideas what to check?

Hello Dino,
thanks very much for your reply.
The client uses a machine-certificate, the PKI is not a microsoft one, but a third party PKI. The certificate is fresh and valid, the root-cert is installed and checked to be validated against it for the login.
Clock is correct too. The same setup works flawlessly in Windows 7 and XP.
EKU is set on the certificate (1.3.6.1.5.5.7.3.2)
I suspect the cert-setup itself, but don't get a clue where this might stuck...
Björn

How to remove Expired Certificate in Certification Authority

So the base certificate at a client site running Server Standard 2012 R2 expired.
I went in and did a renewal, which created a new certificate, but the old expired cert still shows in the list and is still being handed out by the CA.
Certificates #1 & #2 are the renewed cert's, Cert #0 is expired, why did it not get replaced during the renewal process?
How do I remove the expired Certificate? The CA is still using it and handing out expired cert's, this is preventing people from connecting to the secure Corporate WiFi environment because the NAP server is now rejecting access due to an expired certificate.
Before I renewed and changed the certificates in the NAP server to point to the new reviewed cert, I was getting this event log entry when a user tried to connect to the Secure Corporate WiFi:
Event ID 6273, Reason Code 262, The supplied message is incomplete. The signature was not verified.
After I changed to the Certificates in the NAP server to point to the renewed cert's, I get this error, still not able to connect to WiFi:
Event ID 6273, Reason Code 265, The certificate chain was issued by an authority that is not trusted.
How do I go about cleaning out that Expired Certificate in the CA, I removed it from the computer cert list using the Certificates snap in and connecting to the local computer. I then stopped and restarted both the CA and NAP services. Still
no change. I need to get the CA cleaned up and trusted again.
Any help would be greatly appreciated.
Curt Winter
Microsoft Certified Professional

Ok the NAP server is now working properly, the Expired Certificates are clean up and we are back in working order.
Here is a review of what I did to get the issue resolved:
1) First thing was to remove the old SBS server entries that where causing the workstation to try and renew their certs with the old server. To do this I ran ADSIEdit expanded the
CN=Configuration | CN=Services | CN=Public Key Services. I then went through every folder and every entry under Public Key Services looking for and removing or updating entries pointing to the old SBS. I then made sure authenticated
users had read permissions on CN=Enrollment Services.
2) Ensure the CA is an Enterprise CA, I ran certutil -cainfo
to ensure it showed as Enterprise Root CA.
3) I then went back into ADSIEdit expanded
CN=Configuration | CN=Services | Public Key Services | CN=Enrollment Services. Right click the CA in the right pane and ensure
flags is set to 10.
4) Ensure the CA is trusted, launch PKIView, right click on
Enterprise PKI and select Manage AD Containers click on the Enrollment Services Tab, the status should show as OK.
5) I then copied that Certificate to a file and ran certutil -verify on the file to check for any additional errors.
6) I then opened CertSrv.msc on the CA, right click on the name of the CA and select properties, click on the Security tab and ensure Authenticated Users have the
Request Certificates permission.
7) I then ran certutil -deleterow 3/11/2015 Cert to remove all the certs that had expired before 3/11/2015.
At this point the workstations started to get new cert's all the cert renewal errors in the client event logs stopped
8) I then went back into the NAP server and select the correct certificate fin the EAP Properties and Smart Card properties.
9) I then updated the domain 802.11X policy ensuring all the EAP properties had the correct certificate listed.
At this point computers where again connecting to the Secure WiFi through the NAP server. I hope this may help someone in the future.
Curt Winter
Certified Microsoft Professional
Curt Winter

Delete expired data guard

Hi,
I got a question regarding the primary db and the data guard db. I had to reduce the amount of files retained due to space limitations on the primary. When I clicked on the delete expired button and the job is run the files that are deleted on the primary are they also deleted on the data guard db? If not will this cause a problem if when a fail over or switch over is needed?
Thanks in advance for your help.
al

Good Morning Kam Singh
I just have one additional question that occurred to me last night at home. There was an issue with hard parsing that my ADDM advised increasing my SGA by 2.5 gigs. Someone on the forum here was kind enough to give me the view V$sgainfo to find out how much free memory was available in my system. Well when I interrogated this view it came up with a big fat zero availability. Now from what I understood from my readings was that 10g sga was dynamic. That the memory processes are adjusted to need from information taken from the AWR. At the page where the ADDM listed a button to implement the change (increase) I hesitated until I found out how much free was available. Right now I am glad that I did. My question is If I did click on that implementation button would have the oem tool taken the memory not being used from some other location and allocate it to this spot or would it have returned an error of some kind?
You may have more experience with this and may have come across this situation than I. Do you recall what you did?
Does anyone else recall what they did in this situation?
Please give advise.
Regards to all,
al

Expired certificate error for language packages

I wish to inform the nokia authority,that the language package(UK english Martin) provided for Message Reader app (symbian belle) is showing 'CERTIFICATE EXPIRED' error ,whenever I tried to install the language pack.
I request the authority to kindly extend the certificate period more so that all user can use those packages.
I downloaded the language pack from:
http://www.nokia.com/global/support/text-to-speech/
Handset model : NOKIA 701

Same problem with US english language packs, expired certificate despite the fact that I just downloaded it from Nokia a few days ago. So please Nokia renew the certificate for the Nokia super 701 Text To Speech Language packs.
Handset Model: Nokia super 701 FP2

Can I trust an expired certificate?

Hi,
is there any setting that will let me trust an expired certificate? I'm communicating with a server that has an unsigned expired certificate. The funny thing is that this behavior seems to has changed on different jvm-versions, on one of my client-machines I'm running a jvm version 1.5.0_06-b05, which is accepting the expired certificate. On a different client I'm running jvm version 1.5.0_07-b03, and this version is NOT accepting the expired certificate, I'm using the exact same trust store file!?
Of course the solution is to install a valid certificate on the server but that is out of my control...
Regards
Magnus

is there any setting that will let me trust an expired certificate?That's a contradiction in terms. The person who signed it, or self-signed it, gave it an expiry date beyond which you shouldn't trust it. So you shouldn't trust it.
Of course the solution is to install a valid certificate on the server but that is out of my control...It probably isn't out of your control at all. If it's a third party, complain to their customer service or IT department. If it's internal to your organization, ditto, and in both cases raise it as a major security risk for the project - get it elevated to project manager level or beyond. Be the squeaky wheel that gets the grease.

I have an external hard drive connected to my iMac 2006; the OS on this iMac has been upgraded. I wanted to have back up copies of all our photos on iPhoto; I moved the iPhoto Library folder to the EHD. Now I want to delete a lot of the photos on the iM

I want to delete the photos on the iMac's hard drive but I want all the copies on the EHD; to free up space on the iMac. I experimented by deleting one photo in the iPhoto library on iMac but when I checked the EHD, it was deleted there, too. How can I delete photos from iMac w/out deleting from EHD?

Photo Library icon that sits on my desktop
Do a Get Info in the Finder on that, is it an Alias pointing to the external drive?
Open the iPhoto Library folder on your actual internal drive in the Finder, is that deleed pic stil there?

How do I export apps from my iPhone to my iMac? I received notice that there is an update now for the iOS in my iPhone, but that I first needed to transfer some files (apps?) from the iPhone to my iMac. But I cannot find anything in the Help menu on this.

How do I export items from my iPhone to my iMac? Apple sent me a message to my iPhone, saying that there is an update for iOS, to 6.1.3, but before I install this update, I should first transfer some items from the iPhone to my iMac; otherwise I would lose these items (apps?)
I have two problems with this: 1) I don't know what files I should transfer, and 2) I don't how to transfer from an iPhone to an iMac (but do know how to download apps from iTunes Store to my iMac, and then to my iPhone.
Very confusing! Any help/suggestions gratefully accepted.
DBH

Move the cursor to the very top of the computer's screen, click on File, and choose Transfer Purchases. If you need to authorize the computer, the command is in the Store menu.
(79537)

I have a long list of Certificate Authorities, many of which are overseas, e.g. Netherlands, Turkey, China, and many others. Should I delete them?

I have a long list of Certificate Authorities (about 280), many of which are overseas, e.g. Netherlands, Turkey, China, and many others that are unknown to me. They do not appear to be related to any websites I visited. Are my emails compromised in terms of privacy? Should I delete them? Why do I need so many certificate authorities?

Sure delete them... but when you get email or try and open a web page that has a certificate from them you will not be able to open the mail or the web page without issues or making manual decision to trust the authority in question. The geographical location of the certifying authority is of no relevance.
The now defunct Mozilla Messaging used a certifying authority in Israel for it's certificates (Start) so if someone had deleted that from their settings in a fit of xenophobic housekeeping they would not have been able to open their web sites or read mail from their employees without problems.
Certifying Authorities form a chain of trust. They on the whole certify one another, but at the top of the certification pyramid/s there most be someone or group of someones who the program simply "trusts" to certify. Hence programs have a long list of pre approved companies that are allowed to issue certificates. These lists are constantly updated and should there be a serious security issue such as one of the authorities being compromised. The people at Mozilla will update or revoke that authorities trusted status.

I want to delete a wireless entry in Keychain from the command line - how?

We have 800+ laptops that have a wireless that we want deleted from the stations keychain. The ssid is called "campus".
I would like to know how to using command line delete the campus entry. I have been playing with the security command, but cannot seem to delete the keychain entry.
Any suggestions?

"Everything I know about the command is in the man page. I can't give you a literal command, because I don't know what to put in for the arguments. To be honest, if the man page is not understandable enough for you to build the command, I don't think you should use it at all. Use Profile Manager in OS X Server, which is the right way to do what you're trying to do."
I do not know why this post did not show up here on the thread, I did get the email. Not sure how to respond. We have 800 stations. Can not go and touch each one, so looking for a command line to remove the ssid "campus" - If I read your message correct, you do not know the command line either for this. Thank you.

The SSL certificate of the server is expired

Today, I accessed Beehive Online via Oracle Beehive Extentions for Explorer.
I cannot use Beehive Online with error message "The SSL certificate of the server is expired".
How should I do?

We're looking into it, meanwhile you can use a Webdav connection.
Thanks,
Jereen

Should i delete expired certificates in the keychain on my iMac

Similar Messages

Maybe you are looking for