SharePoint 2016 issues with web services saying access denied: https address to services fails

I should title this how to properly break a SharePoint farm without any malice.

So all the https address to the service applications would fail and not give the typical do you trust this site that has a bad certificate.

In the Certificate add-in in the MMC (microsoft management console), the SharePoint services Certificate and the SharePoint Security Token Service Certificate says invalid signature. 

After trial and error on why the certificate signature is invalid, the root cause was the SharePoint Root Authority Certificate. 

Short answer is to export it and save it and then delete it from the trusted store. 

Everything is fixed.    

SharePoint Upgrade Stuck at 10%

Check your permissions in the registry for the WSS_ADMIN_WPG.


https://technet.microsoft.com/en-us/library/mt842674(v=office.16).aspx





















or you can just add the timer job account to the local administrator group temporary while you run the upgrade.