Event ID: 50011 - SSL Certificate renewal has been failed.

[fostek-software]

SSL Certificate renewal has failed. Error: SSL certificate failed due to network conditions. Unable to reach Certificate Issuing Servers. We'll try again in a couple of hours.

This error happened this morning with our 3CX system. Can I get some assistance with diagnosing the issue and finding the fix?

I tried looking into the logs, but it seems like we've never had the certificate renewed.

"RenewCertificates": true, (this is set)

This happens too: Finish updating certificates. Updated 0 certificates

Any help?

 

[Saqqara]

What is your version of 3cx, including build number

 

[fostek-software]

I am getting this when I look into the version number.

Version: 18.0 Update 1 (Build 237) (Found it on the dashboard)

 

[Saqqara]

Requires backup and reinstalling of 3cx

Select post #3 https://www.3cx.com/community/threads/activation-3cx-com-is-not-reachable.113694/

 

[fostek-software]

Why does it need to be reinstalled? Just maintenance things?

We have a second 3cx instance and it works fine.

 

[Saqqara]

See https://www.3cx.com/community/threads/activation-3cx-com-not-reachable.113685/

 

[ChrisC_3CX]

You can of course take a look in the Management Console's Updates section to see if you have any available updates for U2 and update if you do. If not you will have to re-install because the version you are currently running will not be able to activate and update due to the fact that it has the old activation FQDN hardcoded: https://www.3cx.com/blog/releases/fqdn-endpoint-change/

 

[fostek-software]

@ChrisC_3CX

I do have an update available, will this resolve this issue?

 

[Saqqara]

@ChrisC_3CX

I do have an update available, will this resolve this issue?

If the update gets the system to 3CX Version 18, Update 3 FINAL, Build 18.0.3.450 February 2022, yes it will resolve the issue.

You may have to run updates a few times to install the necessary updates

 

[fostek-software]

Got it, I will keep this thread posted.

Thanks.

 

[fostek-software]

Hello @ChrisC_3CX, I updated and I was going to just wait and see if it throws another error or not, but is there a way to check if the certificate was renewed successfully after the update?

Now I am 18.0 (Build 461). Thanks.

 

[ChrisC_3CX]

You can check the actual ssl certificate validity period:

Access the 3CX MC in Google Chrome:










If it hasn't already just give it a day or two.


Also, do make sure the PBX can activate the License now by going to "Settings >> License" and clicking on "Refresh License Key Information"