While upgrading an Exchange 2013 server to the latest cumulative update, I ran into the following error while setup was configuring prerequisites.
Service 'WMSVC' failed to reach status 'Running' on this server.
When attempting to start the service manually via the Services MMC, it refused to start, resulting in the following error.
Windows could not start the Web Management Service on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code -217483640.
When reviewing the System Event Log an equally cryptic error was displayed.
The Web Management Service service terminated with the following service-specific error: Unspecified error
My customer mentioned they had problems recently renewing a certificate so I started there. When I reviewed the Exchange certificates from the Exchange Admin Center I quickly noticed one of the default certificates was missing, specifically the WMSvc certificate.
This certificate is critical for the Web Management Service to operate. Luckily it is easy to replace.
Recreate the missing WMSvc certificate
To recreate the certificate in the Exchange Admin Center, navigate to the Servers tab and Certificate sub-tab. Click on the New () button.
In the New Exchange Certificate dialog select Create a self-signed certificate and click Next.
For a Friendly Name specify WMSVC. Click Next.
Click the Add () button to specify the server missing this certificate. Click Ok and Next.
On Specify the domains page click Next. We will make changes to the next page.
On the next page select the bold entry and click the Edit () button. On the edit page, change the entry to WMSvc-<name of server>. You can remove all other entries using the Remove () button. The final list should resemble the screenshot below, where you have specified a server name (in our example EX13-01) with the prefix WMSvc-. Click Finish. Click Close.
Apply the certificate in IIS
Launch Internet Information Services Manager, select your server node in the left pane, and Management Service in the right pane.
Scroll down to the SSL certificate section and pick the WMSvc certificate created earlier. Click Apply in the action pane.
You should now be able to start the Web Management Service from the Services MMC and continue the Exchange setup.
Have you seen this issue before? What did you do to fix it? Drop a comment below or join the conversation on Twitter @SuperTekBoy.
Brett says
We found a different solution for this error:
Ensure that the service is configured to Log On as Local System Acct.
Once we changed this setting, the WMSVC service started without issue.
Don Schaefer says
Thanks, this got us past a roadblock decommissioning Exchange 2013
Rich Ledoux says
The Google needs to put this article first in its search results!
Rolf says
Indeed!!
Luca says
Great job!!!
imad zahrane says
Thanks a lot 🙂
SR says
Thanks for this – it helped me out!
Marcio Schmitt says
Thank You
Woked like a charm!
BaconBandit says
Does the Web Management Services cert HAVE to be self-signed? We’re running a CA as well as an Exchange server. If possible, I’d like to use a cert from a CA.
Khaled El Gazzar says
Great work. You saved my day
Deepak says
Very well and descriptive. Good work.
Kevin says
Very well written, concise and accurately presented, Thank you!
Andrew Nash says
great blog post, saved me on the exchange 2013 cu21 update when one of my mailbox servers refused to upgrade.
Stephen says
Thank you. Your article was clear and concise. This solved my issue that occurred randomly after a Windows Update approximately a month after I updated my certificates to a wildcard certificate.