SharePoint Geek » External Collaboration Tool-Kit http://sharepoint-geek.com SharePoint Tips & Tricks Thu, 29 Jul 2010 19:19:27 +0000 en hourly 1 http://wordpress.org/?v=3.0 IIS Admin Error: Handle Is Invalid – Permissions SSL Certificate MachineKeys http://sharepoint-geek.com/2010/05/05/iis-admin-error-handle-is-invalid-permissions-ssl-certificate-machinekeys/ http://sharepoint-geek.com/2010/05/05/iis-admin-error-handle-is-invalid-permissions-ssl-certificate-machinekeys/#comments Wed, 05 May 2010 18:32:18 +0000 stewart http://sharepoint-geek.com/2010/05/05/iis-admin-error-handle-is-invalid-permissions-ssl-certificate-machinekeys/ Well, I’ve been trying to setup the External Collaboration Toolkit.  All of the instructions tell how to do it as a standalone install, but I am trying to get it setup in a farm.  One of the steps in the instructions is to setup ADAM to act as the authentication for external users.  The communications with ADAM need to be SSL encrypted.  So, I set it up the way the instructions say and went through the portion that ensures that the UserID that runs the ADAM service has access to the SSL Certificates. 

That’s when I must have went wrong.  Somehow, I removed access to the SSL Certificates from the service that runs the IIS Admin service.  So, when I rebooted, IIS would not start.  The only thing that was in the event log was:

Handle is invalid

Real helpful, huh?

Luckily, I was able to find Microsoft KB Article #278381.  The basic thing is that I needed to reset the security on the SSL Certificates.  Below is an explaination:

The MachineKeys are at the following location:
All Users Profile\Application Data\Microsoft\Crypto\RSA

The following settings are the default permissions for the MachineKeys folder:

Administrator (Full Control) This folder only
Everyone (Special) This folder, subfolders, and files
SYSTEM (Full Control) This folder, subfolders, and files 
 

To view the special permissions for the Everyone group, right-click the MachineKeys folder, click Advanced on the Security tab, and then click View/Edit. The permissions consist of the following permissions:

  1. List Folder/Read Data
  2. Read Attributes
  3. Read Extended Attributes
  4. Create Files/Write Data
  5. Create Folders/Append Data
  6. Write Attributes
  7. Write Extended Attributes
  8. Read Permissions

 

Select the Reset Permissions on all Child objects and enable propagation of inheritable permissions check box.

Tags: , , ,

Related posts

  • No related posts.
]]> http://sharepoint-geek.com/2010/05/05/iis-admin-error-handle-is-invalid-permissions-ssl-certificate-machinekeys/feed/ 0 Error Running The Configuration Wizard http://sharepoint-geek.com/2009/10/22/error-running-the-configuration-wizard/ http://sharepoint-geek.com/2009/10/22/error-running-the-configuration-wizard/#comments Thu, 22 Oct 2009 11:44:00 +0000 stewart http://sharepoint-geek.com/2009/10/22/error-running-the-configuration-wizard/ I installed a Windows Services () Web Front End (WFE) onto an external server to be used for the External Collaboration Tool-Kit.

Once I got it installed I ran the Products & Technologies Configuration Wizard and received the following error:

Failed to register services.

The log pointed to several different registry keys located at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\Web Server Extensions\12.0\\Services.

I deleted everything under that location and it completed successfully.

Tags: , , , , , ,

Related posts

]]> http://sharepoint-geek.com/2009/10/22/error-running-the-configuration-wizard/feed/ 0