Error message when you try to recover a domain member account after you upload a new certificate to a Groove Management Server: "Certificate Not Valid" (922140)

MORE INFORMATION

When you upload a new passphrase or data recovery certificate to the Groove Management Server or make other policy updates to the server, the client computer must connect to the server to receive those changes.

If the account has not logged in and successfully initiated a connection to the Groove Management Server since the certificate was replaced, you cannot use the new certificate to recover that account. Because the certificate is seen as invalid, you receive the error message that is mentioned in the "Symptoms" section.

Even if there are no problems with the network and all users are always logged in to Groove, load balancing can still cause a lag that lasts several hours between the update on the server and the update on the client computer. If an account is offline because of user absence or because of a lack of network access, the client information can be much older. To work around this issue, retain old certificates in an archive for at least 60 days.