IIS Server Security - SSL Cert Request Access Denied

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > December 2004 > SSL Cert Request Access Denied





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author SSL Cert Request Access Denied
Eric Renken

2004-12-28, 2:51 am

I have a Windows 2003 server that is a member of a Windows 2000 domain, but
is not a domain controller. I am trying to create a SSL cert for it, but
when I go though the wizard to request a cert every time it gets to the
point of writing the certreq.txt file I get an access denied on the final
screen. I have tried saving the file in may different location and I always
get this error. Right now I am unable to create a SSL cert on that server.

Any suggestions?

Eric Renken


Ken Schaefer

2004-12-28, 7:53 am

Can you use Filemon (www.sysinternals.com) and confirm that it's a file
permissions problem?

Cheers
Ken

"Eric Renken" <EricRRenken@newsgroup.nospam> wrote in message
news:ewtCwWK7EHA.3708@TK2MSFTNGP14.phx.gbl...
>I have a Windows 2003 server that is a member of a Windows 2000 domain, but
>is not a domain controller. I am trying to create a SSL cert for it, but
>when I go though the wizard to request a cert every time it gets to the
>point of writing the certreq.txt file I get an access denied on the final
>screen. I have tried saving the file in may different location and I
>always get this error. Right now I am unable to create a SSL cert on that
>server.
>
> Any suggestions?
>
> Eric Renken
>
>



Eric Renken

2004-12-28, 6:06 pm

All I get is the screen before it tries to create it is a FILE NOT FOUND,
but when I click next to go to create the file, I get nothing. I set a
filter on certreq.txt, and nothing new shows up in the monitor.

Eric Renken

"Ken Schaefer" <kenREMOVE@THISadopenstatic.com> wrote in message
news:e2bk4xM7EHA.1524@TK2MSFTNGP09.phx.gbl...
> Can you use Filemon (www.sysinternals.com) and confirm that it's a file
> permissions problem?
>
> Cheers
> Ken
>
> "Eric Renken" <EricRRenken@newsgroup.nospam> wrote in message
> news:ewtCwWK7EHA.3708@TK2MSFTNGP14.phx.gbl...
>
>



WenJun Zhang[msft]

2004-12-29, 7:52 am

Hi Eric,

You may set filter as: mmc.exe;inetinfo.exe to have a try.

Happy holidays!

Best regards,

WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security

Eric Renken

2004-12-29, 5:56 pm

That did it, the application that is trying to access this is the mmc.exe.

I was being denied access to:

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys

Interesting problem, but giving admins access to that directory fixed it.
It must have been turned off at one point.

Thanks,

Eric Renken

""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
news:$5pIYzY7EHA.768@cpmsftngxa10.phx.gbl...
> Hi Eric,
>
> You may set filter as: mmc.exe;inetinfo.exe to have a try.
>
> Happy holidays!
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
>



WenJun Zhang[msft]

2004-12-30, 7:56 am

Missing permission on MachineKeys is a familiar cause of IIS SSL
issues.

Happy holidays!

Best regards,

WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com