Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Sunday, March 1, 2009 5:07 PM
Sometimes we get this error message:
[Window Title]
Hyper-V Manager
[Main Instruction]
An error occurred while attempting to change the state of virtual machine VSTEST01.
[Content]
'VSTEST01' failed to initialize.
Could not initialize machine remoting system. Error: 'Unspecified error' (0x80004005).
Could not find a usable certificate. Error: 'Unspecified error' (0x80004005).
[Expanded Information]
'VSTEST01' failed to initialize. (Virtual machine 70841B77-2533-487D-9FE7-B9AF907A31C0)
'VSTEST01' could not initialize machine remoting system. Error: 'Unspecified error'(0x80004005). (Virtual machine 70841B77-2533-487D-9FE7-B9AF907A31C0)
'VSTEST01' could not find a usable certificate. Error: 'Unspecified error' (0x80004005). (Virtual machine 70841B77-2533-487D-9FE7-B9AF907A31C0)
[V] See details [Close]
After restarting the Virtual Machine Management Service, the problem goes away. Any ideas how we can prevent this from occuring?
All replies (6)
Wednesday, March 4, 2009 1:37 AM ✅Answered
Hi,
It seems that this issue occurs because the Hyper-V Virtual Machine Management service (VMMS) certificate has expired.
Please perform the hotfix in the following article to see whether the issue continues.
You cannot connect to a virtual machine when the Windows Server 2008 Hyper-V VMMS certificate has expired
http://support.microsoft.com/?id=967902
Best regards,
Vincent Hu
Thursday, October 7, 2010 6:51 PM
Hi,
I get the same bug but on 2008 R2 and I have noticed that I'm not the only one. I thought it was supposed to be fixed for 2008 R2?
Anyways, I found information on a blog saying that for 2008 you only need to apply the KB fix but that under 2008 R2 you only need to reboot the host to fix everything.
Since I'm not very fond of rebooting a production server because of a certificate problem is there any other way around this?
Thanks,
Sebastien Chamberland
Thursday, November 18, 2010 1:32 AM
Hi Sebastian
Note that even though the certificate is not expired - there must be something that is stopping VMM from using it.
- Check if ACL'd is correctly
2. this KB http://support.microsoft.com/kb/967902 applys also to Windows 2008 R2. Information confirmed by Ben Armstrong. Microsoft Virtualization Program Manager : The behavior that is being seen is one where VMM could'nt find a suitable certificate for to use.
And if you want to learn more about the way Hyper-V uses Certificates, please read http://technet.microsoft.com/en-us/library/ff935311(WS.10).aspx
If this post is helpful, please mark it as such
________________________________________
Alessandro Cardoso
MVP | Microsoft Heroes | MCT
blog: http://virtualisationandmanagement.wordpress.com
http://virtualizacaoegerenciamento.wordpress.com
Thursday, November 18, 2010 2:06 PM
Hi Alessandro
1. I'm not too sure what you really mean here?
2. I don't think KB967902 applies also to Windows 2008 R2 since when I try to install it it gives me an error message saying "The update is not applicable to your computer". Could it be something else preventing me from installing it?
Thanks,
Sebastien Chamberland
Friday, November 19, 2010 12:50 AM
Hi Sebastian
When VMMS starts, Hyper-V searches for an existing, valid certificate to prepare for future communication requests. If one is not found, Hyper-V generates a self-signed certificate in the VMMS certificate store.
Also, you need to ensure that Virtual Machine group security identifier has read access, be verifying the Access control list (ACL) .
To Check the VMMS certificate store for a self-signed certificate :
-
- Open Microsoft Management Console. Click Start, click Run, type mmc, and then click OK.
- Under the File menu, click Add/Remove Snap-in.
- Under Available snap-ins, click Certificates.
- Click Service account, and then click Next.
- Click Local computer and then click Next.
- In the Service account list, select Hyper-V Virtual Machine Management and then click Finish.
- Expand Certificates - Service , expand Vmms\Personal , and then click Certificates.
- Check the Certificate and expiration date in the VMM Service certificate window
Please take a lok in this article : Configuring Certificates for Virtual Machine Connection. http://technet.microsoft.com/en-us/library/ff935311(WS.10).aspx
If this post is helpful, please mark it as such
________________________________________
Alessandro Cardoso
MVP | Microsoft Heroes | MCT
blog: http://virtualisationandmanagement.wordpress.com
http://virtualizacaoegerenciamento.wordpress.com
Friday, November 19, 2010 1:09 AM
Hi
I also post about this issue : http://virtualisationandmanagement.wordpress.com/2010/11/19/how-to-fix-the-unspecified-error-0x80004005-could-not-find-a-usable-certificate-windows-2008r2/[
](http://virtualisationandmanagement.wordpress.com/2010/11/19/how-to-fix-the…windows-2008r2/)
If this post is helpful, please mark it as such
________________________________________
Alessandro Cardoso
MVP | Microsoft Heroes | MCT
blog: http://virtualisationandmanagement.wordpress.com
http://virtualizacaoegerenciamento.wordpress.com