Windows Registry Disclaimer:
Quest does not provide support for problems that arise from improper modification of the registry. The Windows registry contains information critical to your computer and applications. Make sure you back up the registry before modifying it. For more information on the Windows Registry Editor and how to back up and restore it, refer to Microsoft Article ID 256986 “Description of the Microsoft Windows registry”.
The process below will walk through how to delete the current keys, create new SHA2 keys, repair the agents, and repair replication.
Delete existing SHA-1 registry keys:
- Stop the Rapid Recovery core service.
- Open the registry and browse to the following location - HKLM\Software\Apprecovery\Core\CertificateService\
- Delete the following Keys:
- Start the core service
- NOTE - all agents and replication will now have "red" statuses.
- In Core Console click Protected Machines
- For each machine with a red status (Error), select "Repair." This is located in the action drop down menu on the right side of the machine with a red dot.
- This will repair the certificate, the machine will have green status (Online) when completed.
- On the Source Core, navigate to Replication
- Under Outgoing Replication, select Target Cores, click Delete
- On the Target Core, navigate to Replication
- Under Incoming Replication, select Source Cores, click Delete
- DO NOT select "Delete existing recovery points", click Yes
- On the Source Core add Target Core and Agents back to replication. This will pair the cores with a new SHA-2 certificate.
The Agent installation does not have to be a Rapid Recovery release for this process to work.