In Microsoft System Center Configuration Manager 2007, the issuing certificate that System Center Online uses to validate the bootstrap certificate expires in September 2012. After this date, System Center Online does not recognize the bootstrap certificate.
Note The current hardcoded Asset Intelligence (AI) bootstrap certificate is valid until June 19, 2015.
A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.
If the hotfix is available for download, there is a "Hotfix Download Available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix. Note
If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website: Note
The "Hotfix Download Available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
When you install the update, the computer resets the System Center Online Point server role. This restarts the AI_UPDATE_SERVICE_POINT service. However, the service might not start in certain environments because the AI_UPDATE_SERVICE_POINT service does not start in 30 seconds. In this situation, use Method 3 that is described in Microsoft Knowledge Base (KB) article 941990 to extend the service startup time-out value to 150 seconds.
For more information about how to extend the service startup time-out value, click the following article number to view the article in the Microsoft Knowledge Base:
A digitally signed .NET Framework 2.0 Windows application may start very slowly, or a Windows service may time out during startup
The hotfix package can be installed on a System Center Configuration Manager 2007 SP2 site server that is running an x86-based or x64-based version of an operating system.
For more information about the installation guide, click the following article number to view the article in the Microsoft Knowledge Base:
System Center Configuration Manager 2007 Hotfix Installation Guidance
To apply this hotfix, you must have System Center Configuration Manager 2007 Service Pack 2 (SP2) installed.
You must install this update on the central site.
You do not have to restart the computer after you apply this hotfix.
Hotfix replacement information
This update replaces the following update:
"Bad certificate" error when you use an Asset Intelligence synchronization point on a System Center Configuration Manager 2007 SP2 site server after the bootstrap certificate expires
The English (United States) version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
|File name||File version||File size||Date||Time||Platform|
|Aius.msi||Not Applicable||1,452,032||01-Feb-2010||18:10||Not applicable|
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.