I have a Windows 2003 server that is a member of a Windows 2000 domain, but
is not a domain controller.  I am trying to create a SSL cert for it, but
when I go though the wizard to request a cert every time it gets to the
point of writing the certreq.txt file I get an access denied on the final
screen.  I have tried saving the file in may different location and I always
get this error.  Right now I am unable to create a SSL cert on that server.

Any suggestions?

Eric Renken

[ Post a follow-up to this message ]

Can you use Filemon (www.sysinternals.com) and confirm that it's a file
permissions problem?

Cheers
Ken

"Eric Renken" <EricRRenken@newsgroup.nospam> wrote in message
news:ewtCwWK7EHA.3708@TK2MSFTNGP14.phx.gbl...
>I have a Windows 2003 server that is a member of a Windows 2000 domain, but
>is not a domain controller.  I am trying to create a SSL cert for it, but
>when I go though the wizard to request a cert every time it gets to the
>point of writing the certreq.txt file I get an access denied on the final
>screen.  I have tried saving the file in may different location and I
>always get this error.  Right now I am unable to create a SSL cert on that
>server.
>
> Any suggestions?
>
> Eric Renken
>
>

[ Post a follow-up to this message ]

All I get is the screen before it tries to create it is a FILE NOT FOUND,
but when I click next to go to create the file, I get nothing.  I set a
filter on certreq.txt, and nothing new shows up in the monitor.

Eric Renken

"Ken Schaefer" <kenREMOVE@THISadopenstatic.com> wrote in message
news:e2bk4xM7EHA.1524@TK2MSFTNGP09.phx.gbl...
> Can you use Filemon (www.sysinternals.com) and confirm that it's a file
> permissions problem?
>
> Cheers
> Ken
>
> "Eric Renken" <EricRRenken@newsgroup.nospam> wrote in message
> news:ewtCwWK7EHA.3708@TK2MSFTNGP14.phx.gbl... 
>
>

[ Post a follow-up to this message ]

Hi Eric,

You may set filter as: mmc.exe;inetinfo.exe to have a try.

Happy holidays!

Best regards,

WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security

[ Post a follow-up to this message ]

That did it, the application that is trying to access this is the mmc.exe.

I was being denied access to:

C:\Documents and Settings\All Users\Application
Data\Microsoft\Crypto\RSA\MachineKeys

Interesting problem, but giving admins access to that directory fixed it.
It must have been turned off at one point.

Thanks,

Eric Renken

""WenJun Zhang[msft]"" <v-wzhang@online.microsoft.com> wrote in message
news:$5pIYzY7EHA.768@cpmsftngxa10.phx.gbl...
> Hi Eric,
>
> You may set filter as: mmc.exe;inetinfo.exe to have a try.
>
> Happy holidays!
>
> Best regards,
>
> WenJun Zhang
> Microsoft Online Support
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> Get Secure! - www.microsoft.com/security
>

[ Post a follow-up to this message ]

Missing permission on MachineKeys is a familiar cause of IIS SSL
issues.

Happy holidays!

Best regards,

WenJun Zhang
Microsoft Online Support
This posting is provided "AS IS" with no warranties, and confers no
rights.
Get Secure! - www.microsoft.com/security

[ Post a follow-up to this message ]