Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

Unable to start Certificate Services, "Keyset does not exist".

$
0
0

Hello All,

Not sure how this happened, but my CA is pooched.  I'm running Windows Small Business Server 2003, SP2.  Certificate Services appears to start, then stops with the following error in the event log:

Type: Error

Date: 3/9/2010
Time: 5:21:28 PM
Event: 7024
Source: Service Control Manager
Category: None
User: N/A
Computer: MyServer
Description:
The Certificate Services service terminated with service-specific error 2148073494 (0x80090016).

According to MS KB295162, verified that Administrator group was owner of "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA" and has full control.

c:\>certutil -verifykeys
CertUtil: -verifykeys command FAILED: 0x80092004 (-2146885628)
CertUtil: Cannot find object or property.

c:\>certutil -getreg CA\CACertHash
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\sbs03\
CACertHash:
  CACertHash REG_MULTI_SZ =
    0: 27 99 0e 68 1f 68 5d 82 03 95 f8 0e 3e 6a f7 a6 0a b5 c4 18
CertUtil: -getreg command completed successfully.

c:\>certutil -store my "27 99 0e 68 1f 68 5d 82 03 95 f8 0e 3e 6a f7 a6 0a b5 c4
 18"
================ Certificate 4 ================
Serial Number: 12e209fee8b90f8045239b89a539ed63
Issuer: CN=sbs03, DC=SBSDom, DC=local
Subject: CN=sbs03, DC=SBSDom, DC=local
CA Version: V0.0
Signature matches Public Key
Root Certificate: Subject matches Issuer
Cert Hash(sha1): 27 99 0e 68 1f 68 5d 82 03 95 f8 0e 3e 6a f7 a6 0a b5 c4 18
No key provider information
Missing stored keyset
CertUtil: -store command completed successfully.


Thank you in advance for your help.

-Guy


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>