You cannot connect to a virtual machine when the Windows Server 2008 Hyper-V VMMS certificate has expired

Article ID: 967902 - View products that this article applies to.
Expand all | Collapse all

On This Page

SYMPTOMS

On a Windows Server 2008-based computer that has the Hyper-V role installed, or on a Microsoft Hyper-V Server 2008-based computer, you may experience one of the following issues:
  • When you try to connect to a virtual machine, you receive the following error message:
    Cannot connect to the virtual machine because the authentication certificate is expired or invalid. Would you like to try connecting again?
  • When you start a virtual machine, you receive the following error message:
    'VMName' failed to initialize.
    Could not initialize machine remoting system. Error: ‘Unspecified error’ (0x80004005).
    Could not find a usable certificate. Error: ‘Unspecified error’ (0x80004005).
Back to the top | Give Feedback

CAUSE

This issue occurs because the Hyper-V Virtual Machine Management service (VMMS) certificate has expired.
Back to the top | Give Feedback

RESOLUTION

Service Pack Information

To resolve this problem, obtain the latest service pack for Windows Server 2008. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
968849
(http://support.microsoft.com/kb/968849/ )
How to obtain the latest service pack for Windows Server 2008

Update information

The following file is available for download from the Microsoft Download Center:

Update for Windows Server 2008 x64 Edition (KB967902)
Collapse this imageExpand this image
Download
Download the 967902 package now.
(http://www.microsoft.com/downloads/details.aspx?FamilyID=289c831c-9142-4c00-bacd-6c1924ff0ecc)


For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591
(http://support.microsoft.com/kb/119591/ )
How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

Prerequisites

Before you apply this update, the release version of Hyper-V must be installed. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
950050
(http://support.microsoft.com/kb/950050/ )
Description of the update for the release version of the Hyper-V technology for Windows Server 2008

Restart requirement

You must restart the computer after you apply this update

Update replacement information

This update does not replace any other updates.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Server 2008 notes

The .manifest files and the .mum files that are installed in each environment are listed separately in the "Additional file information for Windows Server 2008" section. These files and their associated .cat (security catalog) files are critical to maintaining the state of the updated component. The .cat files are signed with a Microsoft digital signature. The attributes of these security files are not listed.

For all supported x64-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Vmms.exe6.0.6001.223833,878,40021-Feb-200906:17x64
Vmwp.exe6.0.6001.223833,526,14421-Feb-200906:17x64

The hotfix also contains the GDR version for all supported x64-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Vmms.exe6.0.6001.182213,878,81621-Feb-200905:06x64
Vmwp.exe6.0.6001.182213,526,12021-Feb-200905:06x64


After you install this update, the Hyper-V VMMS certificate can be renewed automatically when it is expired.
Back to the top | Give Feedback

WORKAROUND

To work around this issue, you can generate a new certificate. To do this, follow these steps:
  1. Shut down or save all virtual machines.
  2. Restart the Hyper-V VMMS.
  3. Start the virtual machines.
Note Because the Hyper-V VMMS certificate is valid for one year, the update has to be applied to prevent this issue from occurring in the future.
Back to the top | Give Feedback

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
Back to the top | Give Feedback

MORE INFORMATION

To determine the expiration date for the Hyper-V VMM service self-signed certificate, follow these steps:
  1. Click Start , click Run , type mmc , and then click OK.
  2. On the File menu, click Add/Remove Snap-in.
  3. Click Certificates , and then click Add.
  4. Click Service account , and then click Next.
  5. Click Local Computer , and then click Next.
  6. Click Hyper-V Virtual Machine Management , and then click Finish.
  7. Click OK to close the Add/Remove Snap-in window.
  8. Expand Certificates - Service , expand Vmms\Personal , and then click Certificates.
  9. Double-click the VMM Service certificate, and then check the expiration date in the VMM Service certificate window.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: -
824684
(http://support.microsoft.com/kb/824684/ )
Description of the standard terminology that is used to describe Microsoft software updates

Additional file information for Windows Server 2008

Additional files for all supported x64-based versions of Windows Server 2008
Collapse this tableExpand this table
File nameFile versionFile sizeDateTimePlatform
Amd64_microsoft-hyper-v-vstack-vmms_31bf3856ad364e35_6.0.6001.22383_none_92eac53930a5ec97.manifestNot Applicable249,72321-Feb-200906:38Not Applicable
Amd64_microsoft-hyper-v-vstack-vmwp_31bf3856ad364e35_6.0.6001.22383_none_91954bdf3181df4c.manifestNot Applicable192,58721-Feb-200906:37Not Applicable
Package_for_kb967902_sc_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,50521-Feb-200914:39Not Applicable
Package_for_kb967902_sc_0~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,52921-Feb-200914:38Not Applicable
Package_for_kb967902_sc_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,41121-Feb-200914:39Not Applicable
Package_for_kb967902_sc~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,43121-Feb-200914:38Not Applicable
Package_for_kb967902_server_0_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,50921-Feb-200914:39Not Applicable
Package_for_kb967902_server_0~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,53221-Feb-200914:38Not Applicable
Package_for_kb967902_server_bf~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,41921-Feb-200914:39Not Applicable
Package_for_kb967902_server~31bf3856ad364e35~amd64~~6.0.1.0.mumNot Applicable1,43921-Feb-200914:38Not Applicable
Update-bf.mumNot Applicable1,77121-Feb-200914:39Not Applicable
Back to the top | Give Feedback

Properties

Article ID: 967902 - Last Review: February 15, 2011 - Revision: 3.0
APPLIES TO
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Datacenter
  • Microsoft Hyper-V Server 2008
Keywords: 
kbhyperv kbsurveynew kbexpertiseadvanced kbhotfixserver kbautohotfix kbqfe kbfix KB967902
Back to the top | Give Feedback

Give Feedback

 
Back to the topBack to the top