Quantcast
Channel: Security forum
Viewing all articles
Browse latest Browse all 12072

ADCS sessions

$
0
0

In ADCS on Windows 2008R2 we are getting " An attempt was made to open a Certification Authority database session, but there are already too many active sessions" on a request usingCERTADMINLib.IEnumCERTVIEWROW.Next(). I found a recommendation to setHKLM\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\DBSessionCount to 64 hex (100 Dec).  With this set we could only get 10 sessions open using IEnumCERTVIEWROW. With debugging and logging turned on I found a reference to DBMaxReadSessionCount  and a matching reference in certsrv.h. When HKLM\SYSTEM\CurrentControlSet\Services\CertSvc\Configuration\DBMaxReadSessionCount  is also set to 64 hex (100 Dec) we can get 100 session running.

What is the impact of setting DBMaxReadSessionCount and are there any problems with explicitly setting this value?

Dan


Viewing all articles
Browse latest Browse all 12072

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>