On-Demand Assessment signing certificate expired

Question

Hello!

Starting from 12 of May 2023, we are experiencing issues with On-Demand Assessments (Active Directory, Azure Active Directory).

File processed.trace.<GUID>.adassessment.assessmenttrace reports this error:

Method=LoadCertificate Message=Certificate has expired or has no valid root.

[20230519_141652] [0001] SironaCore Warning: 6 : [20230519_141652] [0001] Core Advisor(4ef5f572-d431-46b1-bd7d-97d994850c25) Warning: ActivityID=44a9f969-86ce-0000-28e6-ae44ce86d901 Method=LoadCertificate Message=Certificate has expired or has no valid root. Thumbprint=AFBF0B8B6A18F7E23CCA1DDCD0AC1A55B4035173 Subject=CN=Microsoft Corporation, O=Microsoft Corporation, L=Redmond, S=Washington, C=US ErrorMessage=Chain Status=NotTimeValid ChainStatusInfo=A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file.

[20230519_141652] [0001] SironaCore Error: 4 : [20230519_141652] [0001] Core Advisor(4ef5f572-d431-46b1-bd7d-97d994850c25) Error: ActivityID=44a9f969-86ce-0000-28e6-ae44ce86d901 Method=Main Message=Unable to load package. PackagePath=C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Resources\1206\ADSecurityAssessment.execpkg

How we can update files ADSecurityAssessment.execpkg and ADAssessmentPlus.execpkg?

Any advice or recommendation to solve this issue ?

Answer 1

Hi,

I will suggest you to raise a product feedback to the team, so at the bottom of this page there is a contact details and hyperlink so if you can click and follow the process it should raise a notification for the team - https://learn.microsoft.com/en-us/services-hub/health/getting-started-with-on-demand-assessments

==

Please Accept the answer if the information helped you. This will help us and others in the community as well.

Answer 2

MS fixed this issue couple days ago.

Answer 3

Hello,

i ran into this issue with the AMA On Demand Assessments. Basically all assessments downloaded from the Services Hub to the Data Collector got expired Certificates.

Is there a solution/workaround for this?

Thanks!