What to check in the certificates ?

some of the phone's certificates were checked causing opera mini 4.1 not to work on my nokia 6085
so what is the right checking of each of "app. signing" , "Cross-certif." , "server authen." in editable certificates
just look at your phone and tell me what is not checked if your checks are the default

Hi,
If you have a performance issue on your system look for causes of that performance issue in the AWR. eg. compare the awr report for the period with bad performance with that of a one taken when performance was good. AWR taken during bad time would have "things" that weren't in the awr taken when performance was good or have "high values" for some "things". Start from that point and drill down.
If you don't have performance issues then confirm everything is running as it shoud be. Compare several awr reports and there shoulnd't me "anything" out of the ordinary.
You can start with
Instance Efficiency Percentages (Target 100%)
Top 5 Timed Foreground Events
Time Model Statistics
There are no hard and fast rules as to how you go about interpreting an awr. It depends on type of problem you have, your system, your applicaiton, time of day etc.
http://www.dba-oracle.com/t_rac_statspack_awr_report_tips.htm

Similar Messages

  • SSL certificate doesn't work in FF only. It says "The certificate is not trusted because no issuer chain was provided."

    It is suggested here (https://support.mozilla.org/en-US/questions/1021610) to check the website on networking4all.com
    I performed the check and the results are pretty fine. See below:
    http://www.networking4all.com/en/support/tools/site+check/report/?fqdn=happydemics.com&protocol=https
    But Firefox still says it is untrusted. What's wrong with the certificate?

    hello rocketblr, the site isn't providing a full certificate chain that links the intermediate certificate that it uses to the root certificate trusted by the browser: https://www.ssllabs.com/ssltest/analyze.html?d=happydemics.com&hideResults=on&latest
    (in this case it will depend on chance/if you have visited another site which used and implemented the same intermediate certificate properly).
    please report that issue to the webmasters of this particular site...
    http://wiki.gandi.net/en/ssl/faq#what_is_an_intermediate_ssl_certificate

  • The Manifest Designer could not import the certificate

    What I'm trying to accomplish here is to have the .appx file signed during build time so that the following command would work or even better I should not need it anymore
    set path=%path%;"C:\Program Files (x86)\Windows Kits\8.1\bin\x64"
    SignTool.exe sign /a /f certificate.pfx /fd SHA256 /v /p MySecretPassword TestApp.appx
    I opened package.windows.appmanifest file (located in TestApp_root\TestApp\bld\Release\platforms\windows directory) in the editor view, chose Packaging tab and clicked Choose certificate... From there I chose Select from File... from the Configure Certificate
    drop down menu and selected the .pfx we purchased from Symantec few weeks ago. After that I typed in password and password confirmation as requested.
    I ended up getting an error message "The Manifest Designer could not import the certificate", The certificate you selected is not valid for signing because it's either expired or has another issue.
    I checked that the certificate is listed in certmgr.msc Trusted Root Certificate Authorities > Certificates view and it's issued to our Company name.
    In the Manifest Designer Publisher display name matches our Company name, but Publisher is set to CN=$username$
    I tried to change that to CN=Company Name, OU=Company Name that was mentioned in the certificate, but still no luck.
    Certificate also matches the listed requirements: http://stackoverflow.com/questions/22288410/choosing-a-certificate-for-a-windows-store-application-via-the-package-appxmanif
    How to proceed from here?

    Hi terodev,
    I found a similar discussion on the forum:
    https://social.msdn.microsoft.com/forums/windowsapps/en-us/d858d189-6d14-4c8d-809d-d6c841dd8866/using-domain-certificate-for-app-signing
    Could you take a look and give a try to see if it helps?
    --James
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • How to get the client identity from the certificate at server side

    hi, this is ravi kiran,
    I am working on a project which requires, receiving a signed file from the client side and verify whether the file is signed by a valid certificate that is there in the servers keystore.
    How can i get the client certificate at server side and check with the certificates already present in the servers keystore.
    i have no idea how to do this
    can any one help me
    thanx in advance

    Hi Ravi, did you get any answer to your question ?
    I'm also after a similar problem, please share your solution, if you have any.

  • Errors with SharePoint Security Token Service: "The revocation function was unable to check revocation for the certificate"

    I'm getting these errors in the eventlog and ULS, "An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root
    Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS CERTIFICATE THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate."
    The errors point to the SharePoint Security Token Service as the issue ("The revocation function was unable to check revocation for the certificate") reported back by the Topology service.  This is apparent when executing a search, accessing
    the managed metadata service, issuing SPSite commands in Powershell, or anything that needs to run through the "SharePoint Web Services" site.  I've looked at the certificate assigned to that site and everything appears to be in order. 
    It would seem to me to be either an incorrect endpoint configuration (internally cached perhaps?) or related to security access for the configuration database (in order to validate the certificate root).
    What I’ve tried so far:
    I’ve been all over the certificate settings, both in the server store, and within SharePoint Token Service config.  Both appear to be configured correctly such that the root CAs can be validated.
    Re-entered the passwords for the application pool domain accounts to eliminate these as a potential cause.  I’ve also verified the service accounts reporting the error, do have access to the configuration database.
    Re-provisioned the STS service to see if that might clear out any cached issues and validated everything else according to this
    MS Tech note.
    So far nothing has worked.  Is there anything else I could be looking at that I've missed? (Full eventlog detail below)
    Log Name:      Application
    Source:        Microsoft-SharePoint Products-SharePoint Foundation
    Date:          2/20/2015 11:19:41 AM
    Event ID:      8311
    Task Category: Topology
    Level:         Error
    Keywords:      
    User:          <SP SERVICE ACCOUNT>
    Computer:      <SHAREPOINTSERVER>
    Description:
    An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS
    CERT THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
        <EventID>8311</EventID>
        <Version>14</Version>
        <Level>2</Level>
        <Task>13</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2015-02-20T17:19:41.213852500Z" />
        <EventRecordID>1611121</EventRecordID>
        <Correlation />
        <Execution ProcessID="10212" ThreadID="10328" />
        <Channel>Application</Channel>
        <Computer><SHAREPOINTSERVER></Computer>
        <Security UserID="<SP SERVICE ACCOUNT>" />
      </System>
      <EventData>
        <Data Name="string0">CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string1">CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string2"><STS CERT THUMBPRINT></Data>
        <Data Name="string3">RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    </Data>
      </EventData>
    </Event>

    Hi Darren,
    This problem seems to occur when an administrator deletes the local trust relationship of the farm from the Security section of the Central Administration website
    In order to resolve this problem, the local trust relationship has to be created. This can be done by running the following PowerShell commands
    $rootCert = (Get-SPCertificateAuthority).RootCertificate
    New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert
    After running the above commands, perform an IISReset on all servers in the farm.
    More information:
    http://support.microsoft.com/kb/2545744
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • RDS Gateway 2012, RemoteApp Displays "A Revocation check could not be performed for the Certificate" via RDWEB

    I have searched through the forums and there are a number of posts that are similar but all the checks they list seem to not apply to this one.
    My current setup is as follows
    All Servers are 2012 R2
    1 x DC server
    1 x RDS Gateway server with RDS Web installed
    1 x Session Host Server
    Certificate supplied by godaddy with 5 names. (included is the name of the RDS Gateway/Web server in the certificate, the internal name of the session host server is not included as the internal names are differnet to the external)
    My tests are as follows
    Navigating to the RDSWEB page from a machine inside the same network (windows 7 sp1) but not on the same domain is fine no errors and logging in and launching any published application is fine with no errors.
    However logging in on another machine that is external from the network (windows 7 sp1) is ok up to the point of launching any of the published apps I get the error about ""A Revocation check could not be performed for the Certificate". this
    prompts twice but does allow you to continue and login and use the app till the next time. If I view the certificate from the warning message all appears to be ok with all certs in the chain.
    I have imported the root and intermediate certs to each of the gateway/rdsweb server and session host server into the computer cert store just to be on the safe side. This has not helped, I have also run the following command from both windows 7 machines
    with no errors on either
    certutil -f –urlfetch -verify c:\export.cer
    I cant seem to see where this is failing and I am beginning to think there is something wrong with godaddy cert itself somehow.
    If I skip rdsweb and just use MSTSC with the gateway server settings then I can login to any machine on the network with no errors so this is only related to launching published apps on the 2012 R2 RDWEB or session host servers.
    Any help appreciated

    Hi,
    1. Please make sure the client PCs have mstsc.exe (6.3.9600) installed.
    2. If you are seeing a name mismatch error, you can set the published name via this cmdlet:
    Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
    http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
    To be clear, the above cmdlet changes the name that shows up next to Remote computer on the prompt you see when launching a RemoteApp.  You should have a DNS A record on your internal network pointing to the private ip address of your RDCB server. 
    Additionally, in RD Gateway Manager, Properties of your RD RAP, Network Resource tab, you should select Allow users to connect to any network resource or if you choose to use RD Gateway Managed group you will need to add all of the appropriate names to the
    group.
    For example, when launching a RemoteApp you would see something like Remote computer: rdcb.domain.com and Gateway server: gateway.domain.com .  Both of these names need to be on your GoDaddy certificate.
    Please verify the above and reply back so that we may assist you further if needed.  It is possible you have an issue with the revocation check but I would like you to make sure that the above is in place first.
    Thanks.
    -TP
    Thanks for the response.
    To be clear I am only seeing a name mismatch and revocation error if I assign a self signed cert to the session host as advised earlier in the thread by "Dharmesh Solanki", if I remove this and assign the 3rd party certificate I then
    just get the revocation error , I have already ran the powershell to change the FQDN's but this has not resolved the issue although the RDP connection details now match the external url for RDWEB when looking at one of the remoteapp files. The workspace
    ID still shows an internal name though inside this same file. 
    RD Gateway is already set to connect any resource, when connecting using remote app both names (RDCB/RDGateway) show as being correct and are contained within the same UCC certificate. I also already have a DNS entry for the Connection broker pointing to
    the internal ip.
    Do you know if the I need the internal name of the session host servers contained within the same UCC certificate seeing as they are different fqdn's than what I am using for external access ? I resigned the UCC certificate and included the internal name
    of the session host server to see if this would help but for some reason I am still seeing the revocation error. I will check on a windows 8 client pc this evening to see if this gets any further as the majority of the testing has been done on windows 7 sp1
    client pc's
    Thanks

  • Exchange 2010 - The certificate status could not be determined because the revocation check failed.

    I have tried everything I have found online to get my DigiCert to work.
    I have exported the cert and imported it into my child domains and they look perfect.
    It is just my parent domain having issues.
    netsh winhttp show proxy
    does show my correct proxy server for http and https and port 8080
    I have tried name, FQDN and IP address.
    In the Bypass-list I have tried none, *.domain.com, and a list of all domains and child domains in my forest.
    I have flushed the cache
    certutil -urlcache crl delete
    certutil -urlcache ocsp delete
    and rebooted the Exchange 2010 (Windows 2008 R2) server
    No matter what, I still see in my Server Configuration for the parent domain's DigiCert cert the message
    The certificate status could not be determined because the revocation check failed.
    with a red X on the left hand icon.  Again, Child domains all say "The certificate is valid for Exchange Server usage."
    Note: In spite of having the red X, I was able to assign via EMS the services.
    Webmail works fine.  Outlook Anywhere fails... I suspect it is due to my red X problem.
    Suggestions?
    Thanks in Advance
    Jim.
    Jim.

    I have contacted DigiCert and they said the cert is working per their utility, hence the problem is outside the scope of their support.
    I have followed, several times, http://support.microsoft.com/kb/979694
    http://www.digicert.com/help/  reports all is well.
    The DigiCertUtil.exe reports all is well and happy.
    I have run
    netsh winhttp set proxy proxy-server="http=myproxy:8080;https=myproxy:8080" bypass-list="*.mydomain.com"
    Current WinHTTP proxy settings:
        Proxy Server(s) :  http=myproxy:8080;https=myproxy:8080
        Bypass List     :  *.mydomain.com
    I have flushed the cache using the commands
    certutil -urlcache crl delete
    certutil -urlcache ocsp delete
     I still see in my Server Configuration for the parent domain's DigiCert cert the message
    "The certificate status could not be determined because the revocation check failed."
    with a red X on the left hand certificate icon. 
    To verify the cert via command line:
    certutil -verify -urlfetch c:\mail_domain_com.cer
    LoadCert(Cert) returned ASN1 bad tag value met. 0x8009310b (ASN: 267)
    CertUtil: -verify command FAILED: 0x8009310b (ASN: 267)
    CertUtil: ASN1 bad tag value met.
    I suspect this is why I cannot get Outlook Anywhere to connect.
    Child domains show a happy certificate icon. Parent domain does not.
    Still scratching my head.
    Thanks all!
    Jim.

  • TS1702 i have an issues everytime i put my apple id and password to face time and imessage he said verifying and he goes back to where u should put ur password and wont check mark the mail and i create a new apple id the same what should i do ?

    i have an issues everytime i put my apple id and password to face time and imessage he said verifying and he goes back to where u should put ur password and wont check mark the mail and i create a new apple id the same what should i do ?

    i have an issues everytime i put my apple id and password to face time and imessage he said verifying and he goes back to where u should put ur password and wont check mark the mail and i create a new apple id the same what should i do ?

  • I need to verify my Apple ID. i know my e-mail address and the password, but what websit do I go to to check for the e-mail. I have a older laptop and my iTunes is 9.1.1 or something and Apple 10.4.11 so how do I do this. Thanks.

    i know my e-mail address and the password, but what website do I go to to check for the e-mail. I have a older laptop and my iTunes is 9.1.1 or something and Apple 10.4.11 so how do I do this. Thanks.

    i know my e-mail address and the password, but what website do I go to to check for the e-mail. I have a older laptop and my iTunes is 9.1.1 or something and Apple 10.4.11 so how do I do this. Thanks.

  • Hello my name is Omar Andres Santacruz, finished iMedicalOffice buy a program you have in the app store but what he said on the page is not what I expected, I was very disappointed that, frustrated and reweighed when I check my account had gained 139.99 f

    Hello my name is Omar Andres Santacruz, finished iMedicalOffice buy a program you have in the app store but what he said on the page is not what I expected, I was verydisappointed that, frustrated and reweighed when I check my account had gained139.99 for 7 times, I do not understand what has happened that is not the first time I buy something ustedeses thank you very much for your help

    Wow, Karan Taneja, you've just embarrassed yourself on a worldwide support forum.  Not only is your post ridiculous and completely inappropriate for a technical support forum, but it also shows your ignorance as to whom you think the audience is.  Apple is not here.  It's users, like you. 
    If you would have spent half the time actually reading the Terms of Use of this forum that YOU agreed to by signing up to post, as you did composing that usesless, inappropriate post, you (and the rest of us on this forum) would have been much better off.

  • I teach Continuing education classes to Real Estate agents and I need to issue them certificates at the class, whihc need to be signed by me and it needs to contain their info on the certificate. The certificate is currently saved in a word format.What i'

    I teach Continuing education classes to Real Estate agents and I need to issue them certificates at the class, whihc need to be signed by me and it needs to contain their info on the certificate. The certificate is currently saved in a word format.What i'm trying to accomplish is to do a "mail merge " ( as some classes i have as many as 150 attendees) for the document, digitally sign each one with my signature on the certificate and then e-mail it out to the respective attendees. can this be done? if so How?

    This is the step that I took after inputting my signature.
    On the right, after saving my document, I click "Get Others to Sign."  I was confused because it says that it's powered by EchoSign.  Like I stated before, my clients are able to sign this document when I send it to them, but it is returned to me with their signature (not in the signature field, but at the end of the document), and my signature is missing.  I tested this on myself - my signature is missing when they receive it. 

  • On iTunes while downloading a movie it say error please check that the connection to the network is active and try again what does this mean i have an internet connection !!!

    Help
    I dont understand when i download a movie or tv series on my mac book air i get this error message after buying it! its iTunes while downloading a movie it say error please check that the connection to the network is active and try again what does this mean i have an internet connection !!!

    Hello.
    Certain types of software can affect the way a computer sends and receives information from the Internet. This article may help you resolve the issue:
    Information about error -50 and downloading videos
    http://support.apple.com/kb/TS1583
    If it did not work, contact iTunes Store via (http://www.apple.com/support/itunes/store/) and/or Apple Tech Support via 1-800-275-2273.

  • I recently updated my iPad to iOS 8 and still checking on the settings. When I happened to swipe on my screen fro too long, it zoomed and I can no longer see what's on it. I can not even unlock it. What shall I do?

    I recently updated my iPad to iOS 8 and still checking on the settings. When I happened to swipe on my screen for too long, it zoomed and I can no longer see what's on it. I can not even unlock it. I can not use my iPad anymore. What shall I do?

    Try double tapping with three fingers and see if that reduces the screen image. If it does, unlock the iPad and go to Settings>General>Accessibility>zoom>Off. If double tapping with three fingers doesn't work, try triple tapping the home button instead.

  • What formula to add up the values in one column only if a box is checked in the next column?

    Hi guys,
    I am creating a spreadsheet for my wedding guestlist.
    In one column I have a number to tell me the total number of adult guests the party (e.g fried and girlfriend = 2) and then the next two colums are check boxes, one for daytime and the next for nighttime.
    What I would like to do is in a footer row under the daytime time checkbox column is to total the first colum (the total number of wedding guests in each party).
    I hope that I am explaining this ok, sorry if it is vague.
    I understand to use COUNTIF to total the number of checked boxes in the column and have been working on COUNTIF + the sum of the previous column but it's not really working.
    Any help will be greatly appreciated.
    Thanks,
    Phil

    Phil,
    Here's an example of what you might do:
    The expression in the footer of column B is:
    =SUMIF(B, TRUE, $A)
    and, the expression in the footer of column C is:
    =SUMIF(C, TRUE, $A)
    Regards,
    Jerry

  • I am trying to use the Find My Mac on iCloud. I keep getting the error message "No location available" when trying to use find my Mac. Any suggestions as to what to check?

    I am trying to use Find My Mac on Icloud. It keeps giving me the error message No location available for my Mac. Any suggestions on what to check to correct this problem? Thanks!

    http://support.apple.com/kb/TS4006

Maybe you are looking for

  • Maximum of 1363 playlists for iPod sync?

    I have iTunes sync selected playlists to my iPods, but I have encountered what appears to be a playlist limit to do this. I have a very large library (+18k songs) and a large number of playlists (around 1400). iTunes does not show any playlists after

  • MM02 Sales view - Create new Cross distribution chain material status

    Dear Gurus, I need to CREATE new: - Distribution chain specific material status - Cross distribution chain material status Can anyone please help urgently on this? Many thanks for your help Kind regards Chris

  • [Function] Declare a internal table with structure name (entry parameter)

    Hi all, I'm explaining my problem : I want to create a function with two parameters in entry : (IMPORT)  - structure_name with type DD02L-TABNAME (TABLES) - t_outtab with empty type t_outtab will be in structure_name type. Now, in my source function,

  • Your Music Saved Albums library disappearing

    Recently I've been using the "saved album" section found under the Your Music tab but have had all the albums I saved disappear even the albums that were ticked for offline play. I press the save album button which would save the album under the "sav

  • Security chip on T60

    Hello everybody, My problem on a T60 model 2007, type 77g is that while I have the security hip enabled in BIOS I can not activate that from the IBM Embedded Scurity Subsytem. As I can not activate that due to an unexplained error I can not remove th