RE: backup / restore of ssl certificate on iis5

From: Jacqueline Jaynes [MSFT] (JackieJa_at_online@microsoft.com)
Date: 10/05/04 

Date: Tue, 05 Oct 2004 15:21:55 GMT

Make sure that the permissions on the MachineKeys folder is correct.

Default Permissions For the MachineKeys Folders
http://support.microsoft.com/support/kb/articles/Q278/3/81.asp

If that doesn't work, go to the Security tab on the properties of the
MachineKeys folder and check "Allow inheritable permissions from parent to
propagate to this object". Choose OK, restart the IIS services, then try
importing the certificate again.

Hope this helps

Thank you,

Jackie Jaynes [MSFT]
Microsoft IIS
JackieJa@online.microsoft.com

Please do not send email directly to this alias. This
is our online account name for newsgroup participation only.

This posting is provided "AS IS" with no warranties, and confers no rights.
 You assume all risk for your use. © 2001 Microsoft Corporation. All rights
reserved.

Relevant Pages

  • RE: Cannot Generate Certificate Request, KB Q315355 is Wrong
    ... verify the permissions are correct, and even if they are, reset them to ... make sure all machine keys contained in the MachineKeys folder are ... IIS Newsgroup Support ... © 2001 Microsoft Corporation. ...
    (microsoft.public.inetserver.iis.security)
  • Re: "Keyset does not exist" error when installing SSL
    ... > I've had this problem a number of times, and correcting the permissions on ... > the MachineKeys folder has always corrected it. ... We used the Administrator account throughout the whole process, ... > 2) Resetting the permissions, but failing to log off and back on again prior ...
    (microsoft.public.inetserver.iis.security)
  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... Restricted Admins group to mitigate against what you propose Deji. ... also need to make sure the DAs in question cannot elevate their rights to EA, ... > By adding the Deny Write Permissions ACE, ...
    (microsoft.public.windows.server.active_directory)
  • Re: Prevent changes to Administrator password
    ... What I am trying to do is give Taz1972 some options to minimize the risk or make it harder for a lower-level DA to reset the password for the EA account. ... * This posting is provided "AS IS" with no warranties and confers no rights! ... > By adding the Deny Write Permissions ACE, ... > permission to modify the ACL on AdminSDHolder. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Why is Fedora not a Free GNU/Linux distributions?
    ... Taking away legitimate rights, yes, that would be immoral. ... specifically to be incompatible with the GPL, ... Software license) doesn't take away any right you had. ... There are other permissions that enable you to copy and distribute the ...
    (Fedora)