SharePoint 2016 issues with web services saying access denied: https address to services fails

I should title this how to properly break a SharePoint farm without any malice.

So all the https address to the service applications would fail and not give the typical do you trust this site that has a bad certificate.

In the Certificate add-in in the MMC (microsoft management console), the SharePoint services Certificate and the SharePoint Security Token Service Certificate says invalid signature. 

After trial and error on why the certificate signature is invalid, the root cause was the SharePoint Root Authority Certificate. 

Short answer is to export it and save it and then delete it from the trusted store. 

Everything is fixed.    

Install SharePoint 2016 Prerequisites from local folder

My prerequisiteinstaller exe was on the f drive but you can change that to your copy location and also replace the D:\Prereqs folder to your folder.   

 f:\prerequisiteinstaller.exe /SQLNCli:D:\Prereqs\sqlncli.msi  /Sync:D:\Prereqs\Synchronization.msi  /AppFabric:D:\Prereqs\WindowsServerAppFabricSetup_x64.exe  /IDFX11:D:\Prereqs\MicrosoftIdentityExtensions-64.msi /MSIPCClient:D:\Prereqs\setup_msipc_x64.exe /KB3092423:D:\Prereqs\AppFabric-KB3092423-x64-ENU.exe /WCFDataServices56:D:\Prereqs\WcfDataServices.exe /ODBC:D:\Prereqs\msodbcsql.msi /DotNetFx:D:\Prereqs\NDP46-KB3045560-Web.exe /MSVCRT11:D:\Prereqs\vcredist_x64.exe /MSVCRT14:D:\Prereqs\vc_redist.x64.exe 

Upgrade from SharePoint 2013 to SharePoint 2016 issues

I created a new 2016 farm in another domain (development) so that i can test the upgrade from a 2013 farm.  The content upgrade is nice and simple as stated in all the blogs and documentation from microsoft.

Here is the big issue:   Workflow farm!

The 2010 workflows work fine since it is included with the content database but with the workflow farm introduced in 2013, there are multiple parts that needs to be there for it to work like the Application management service which gives the permissions for the workflow by the realms.  

Since the upgrade for 2016 service applications does not include the Application management, i'm stuck.  Here are the things i tried so far

• follow the disaster recovery instructions with minor tweeks for WF pointing to the correct service bus, no go.
• try to copy the activities to the new farm, no go.
• try to re-publish the 2013 workflow in a new workflow farm, no go.  
• possible thoughts but this will not work either due to the app management service, which was to share or use the same workflow farm from the 2013 sharepoint farm and the 2016 sharepoint farm.   

Here is another issue to consider, while doing the 2010 farm to 2013 upgrade, i could upgrade one web application at a time with no issues.   But with the 2013 to 2016 upgrade, i can not do this since the workflow farm holds all the 2013 farms web applications workflows in the same database (WFResourceManagementDB).  This causes some issues since if there is a simple fix for the first issue above then all the web applications need to be upgraded or the 2013 farm needs to point to the 2016 workflow farm.

Will update as i find the solution(s) to the issues found so far.