RE: Installing SSL on SQL Server 2000

From: Kevin McDonnell [MSFT] (kevmc_at_online.microsoft.com)
Date: 12/03/03 

Date: Wed, 03 Dec 2003 19:57:03 GMT

previous Message:
Hello Kevin,
 
I've have installed an Enterprise Root CA on the domain, and I went through
the web form to request and install a new certificate. I installed both an
Administrator certificate and a Web Server certificate, but when I choose
to Force Encryption from the Server Network Utility, I get an error message
when I try restarting SQL Server.
 
The message says something to the effect that encryption is being
requested, but a valid certificate does not exist. I can see the
certificate in the Personal folder, so I'm not sure why I'm getting the
error message.
 
Can you help?
 
Thanks,
Jason
---------------

We use exactly the same certificate that IIS would use to setup a SSL
session. The new error message above indicates that the SQL Server service
account is not finding the certificate. So, look at the account that is
starting the MSSQLServer service. If the service is started using a domain
user account, and the certificate was requested by a local admin, then the
service will not be able to find the certificate.

Thanks,

Kevin McDonnell
Microsoft Corporation

This posting is provided AS IS with no warranties, and confers no rights.

Relevant Pages

  • Re: Change public domain name for E-mail and Web on SBS2003
    ... self-cert from everything while the request was being processed. ... I need to change the e-mail addresses, and the SSL certificate to match ... just run the Connect to the Internet Wizard ... request and install the new SSL Cert? ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Update repeats
    ... You cannot install some updates or programs ... to a Windows component, install a service pack for Windows or for a Windows ... The Microsoft digital signature affirms that software has been tested with ... Publishers certificate store. ...
    (microsoft.public.windowsupdate)
  • RE: 3rd Party Certificate Pending Request not found
    ... This request may be canceled. ... After much trial and tribulation the 3rd party GoDaddy certificate started ... You are attempting to install a certificate that does not match the private ... If you have a backup of the private key, you can install the certificate via ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to install Godaddy cert on SBS R2 Standard box
    ... When you receive the file from Godaddy it is in a .crt file and Windows is looking for a .cer. ... "Please create a new request,and request for a new certificate from ... Godaddy(issue a new certificate),then install the new certificate. ...
    (microsoft.public.windows.server.sbs)
  • Re: Installing an existing GoDaddy SSL on another SBS box....
    ... Certificate' and then 'Assign an existing certificate'. ... I've got a functional GoDaddy SSL cert installed and working on my ... vanilla install so far. ... I got an error that there was no pending request for the ...
    (microsoft.public.windows.server.sbs)
Quantcast