RE: Certificate Services fails to start
- From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
- Date: Tue, 08 Nov 2005 08:15:28 GMT
Hi Steve,
Thanks for using SBS newsgroup!
For your description, I understand that the Certificate Services fails to
start and there is error event 17 logged on your SBS 2003 SP1 server box
with ISA 2004. If I am off base, please don't hesitate to let me know.
Let"s try the following suggestions to try to troubleshoot the issue:
I. Please rerun CEICW to refresh network connection, the process you must
do after you applied SBS 2003 SP1 to the SBS server box. It is recommended
you refer to the following KB article to configure:
825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763
II. Please disable strict RPC compliance protocol rule in the ISA 2004. You
can configure it as follows:
1. Open ISA 2004 server console, locate the Firewall Policy node and click
it.
2. Choose the Firewall Policy rule: SBS Protected Networks Access Rule,
right click it and choose "Configure RPC protocol" item to open it's
configuration page.
3. Please uncheck "Enforce strict RPC compliance" item and then click OK to
finish.
Please try to test to see if the issue be fixed.
III. If the issue persists, it seems the cert database is corrupted.
Please try the following steps:
I. Use the esentutl tool to fix the database:
====
1. Make sure that the Certificate service is stopped. Open Windows
Explorer. Navigate to %systemroot%\system32\certlog\ Make a copy of all
files in this folder.
NOTE: This step is very important! The troubleshooting steps could cause
further corruption on the CA database.
2. Run the following commands. Collect the output and send the result to me
at feijj@xxxxxxxxxxxxx
esentutl -ml %systemroot%\system32\certlog\edb.log
esentutl -mk %systemroot%\system32\certlog\edb.chk
esentutl -mh %systemroot%\system32\certlog\<CA Name>.edb
3. Run esentutl /g %systemroot%\system32\certlog\<CA Name>.edb to fix the
database. After doing this, will the problem be resolved?
4. Delete all files except <CA Name>.edb from the folder. Try to start the
'Certificate Services' from services console. Will the problem be resolved?
If the issue still persists, could you find any other event error in the
Event Viewer? If yes, please also paste it in the newsgroup.
Have a nice day!
Sincerely,
Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>From: "Steve Everington" <steve.nospam@xxxxxxxxxxxxxxxxxx>
>Subject: Certificate Services fails to start
>Date: Mon, 7 Nov 2005 19:20:25 -0000
>Lines: 24
>Organization: Pannell Signs Ltd
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>Message-ID: <eGRAQB94FHA.1140@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: mailgate.pannellsigns.co.uk 83.104.93.106
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:168351
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Hello,
>
>I am unable to get my certificate service to start - I get the following
>error message...
>
>Event Type: Error
>Event Source: CertSvc
>Event Category: None
>Event ID: 17
>Date: 07/11/2005
>Time: 19:04:26
>User: N/A
>Computer: XXXSERVER
>Description:
>Certificate Services did not start: Unable to initialize the database
>connection for xxxxxxxxxCA. Class not registered 0x80040154 (-2147221164).
>
>I am running SBS2003 premium with SP1 and ISA server 2004.
>
>Thanks
>
>Steve Everington
>
>
>
.
- References:
- Certificate Services fails to start
- From: Steve Everington
- Certificate Services fails to start
- Prev by Date: Re: Exchange can't send mail due to the ISP server authentication requirement
- Next by Date: RE: Exchange Forklift - what am I missing?
- Previous by thread: Certificate Services fails to start
- Next by thread: Re: Certificate Services fails to start
- Index(es):
Relevant Pages
|