Cannot Use Non-Administrator Account to Start SQL Server and Force Encryption

From: Jasper Smith (jasper_smith9@hotmail.com)
Date: 01/09/03


From: "Jasper Smith" <jasper_smith9@hotmail.com>
Date: Thu, 9 Jan 2003 02:43:49 -0800


Service Pack 2 definately ssems to fix this.
I changed the service account of a named instance (product
level RTM) to a non admin account, requested and installed
a certificate from a Microsft Certificate Server
(internal) and forced protocol encryption on. The SQL
service failed to start with the same errors as in your
post. I then removed the force protocol encryption and
applied service pack 2. I then reapplied the force
protocol encryption checkbox for this instance and started
the SQL Service. It started successfully.

Can you confirm that the name on the certificate is the
FQDN of the server and that in Internet Explorer, whilst
logged in to the server as the SQL Service account, the
certificate shows up and is Ok and that you trust the
certificate authority.

HTH
Jasper Smith

>-----Original Message-----
>17120 : SQL Server could not spawn FRunCM thread.
>Error: 17826, Severity: 18, State: 1 Could not set up Net-
>Library 'SSNETLIB'.
>19015 : Encryption requested but no valid certificate was
>found. SQL Server terminating.
>Encryption requested but no valid certificate was found.
>SQL Server terminating.
>
>According Microsoft Knowledge Base Article - 314636:
>This bug#356700 (SHILOH_BUGS)has been resolved after
>install SQL SP2.
>
>I still have the same problem with The SQL Server 2000
>service account is a non-administrator account and enable
>the Force protocol encryption option is selected in the
>Server Network Utility. The SQL Service is still fail to
>start.
>
>Does anybody know how to fix this problem?
>
>Thanks!
>.
>



Relevant Pages

  • Re: Delegation problems
    ... I did a search for the SPN and it came back with two ... When the SQL server was initially setup (by a FORMER ... administrator) he used his account as the service account for SQL ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: cant login to sql after ive installed a self made certificat
    ... MS SQL was working fine previously. ... After installing a new self signed certificate using SelfSSL for an IIS ... Let's see your connection string. ... Hitchhiker’s Guide to Visual Studio and SQL Server ...
    (microsoft.public.sqlserver.connect)
  • Re: SQL2000 AND SSL
    ... part about 'creating the certificate while logged on as service account'. ... > Jasper Smith (SQL Server MVP) ... The error message in the event log ...
    (microsoft.public.sqlserver.security)
  • Re: Failed installation of SQL Server 2000 Enterprise on Windows 2
    ... is a certificate somewhere on the server. ... Jasper Smith (SQL Server MVP) ... If trying to install SQL on a server with Certificate Services ...
    (microsoft.public.sqlserver.setup)
  • RE: What rights do Clients Need?
    ... Since this problem is complex and I'd recommend opening a Support incident ... not intend to implement the SSL, you could open your SQL Server Network ... certificate by adding the following Registry key: ... and then start the SQL Server service. ...
    (microsoft.public.sqlserver.security)