installed ssl-certificate -> SQL-Server locked !

Hello NG,
we just installed a ssl-certificate (created with MS-selfssl) on the IIS of
a win2k-Server and since reboot the SQL-Server on the same machine cannot be
accessed anymore. The Enterprise Manager tells us "SSL Security Error.
ConnectionOpen (SECDoClientHandshake()).."
Meanwhile we deleted the certificate, but the server's still locked. What
can we do?
Greatful for any hint,
MarcMake sure that the "force Protocol encryption" option is removed from both
the
Server Network Utility and the CLient network Utility.
Once you remove the certificate, SQL must be restarted. Just MSSQLServer
service, not the machine.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Thanks Kevin,
But how can we modify the Database's options? They're locked as well.
Are there some command line options? How are they applied?
thanks,
Marc
"Kevin McDonnell [MSFT]" <kevmc@.online.microsoft.com> schrieb im Newsbei
trag
news:BtG697KIEHA.3772@.cpmsftngxa06.phx.gbl...
> Make sure that the "force Protocol encryption" option is removed from both
> the
> Server Network Utility and the CLient network Utility.
> Once you remove the certificate, SQL must be restarted. Just MSSQLServer
> service, not the machine.
>
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||There are no database options that relate to protocol encryption.
Does the server start?
Is the problem only establishing connections from Enterprise Manager?
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Meanwhile I checked the two services : "force Protocol encryption" had
already been deactivated for both active protocols (Named Pipes and TCP/IP).
Before, we also removed the certificate. Nothing happened. The SQL-Server is
still locked.
General question : how can we use a ssl-certificate for the web-service
together with a SQL-Server on the same machine? As far as I experienced now,
this is a dangerous experiment if no real MS-Experts are around!? Are there
manuals available?
Still greatful for any hint,
Marc
"Kevin McDonnell [MSFT]" <kevmc@.online.microsoft.com> schrieb im Newsbei
trag
news:BtG697KIEHA.3772@.cpmsftngxa06.phx.gbl...
> Make sure that the "force Protocol encryption" option is removed from both
> the
> Server Network Utility and the CLient network Utility.
> Once you remove the certificate, SQL must be restarted. Just MSSQLServer
> service, not the machine.
>
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||> There are no database options that relate to protocol encryption.
My mistake/misunderstanding - sorry!

> Does the server start?
It looks like. The green arrow shows up.

> Is the problem only establishing connections from Enterprise Manager?
No - all connections (ODBC, MS-Access).
Marc

> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||From previous post:
"General question : how can we use a ssl-certificate for the web-service
together with a SQL-Server on the same machine? As far as I experienced now,
this is a dangerous experiment if no real MS-Experts are around!? Are there
manuals available?"
For SQL 2000 to use protocol encryption, SSL, the server must have a
Certificate issued to the FQDN name of the computer.
This would be the same if you were to setup IIS for SSL using Server
Authentication. So, if IIS and SQL are on the same machine,
then you just need one certificate. You can use the IIS tools to install
the certificate, since SQL doesn't supply any user tools.
I wrote the following two articles. and did the Webcast on setting up SSL
with SQL 2000.
316898 HOW TO: Enable SSL Encryption for SQL Server 2000 with Microsoft
http://support.microsoft.com/?id=316898
276553 HOW TO: Enable SSL Encryption for SQL Server 2000 with Certificate
Server
http://support.microsoft.com/?id=276553
324777 Support WebCast: Microsoft SQL Server 2000: How to Configure SSL
http://support.microsoft.com/?id=324777
Hope this helps,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||I just replied to your earlier posting.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||> I wrote the following two articles. and did the Webcast on setting up SSL
> with SQL 2000.
> 316898 HOW TO: Enable SSL Encryption for SQL Server 2000 with Microsoft
> http://support.microsoft.com/?id=316898
Through this article I found that the certificate had not been deleted
completely. So I deleted the rest, rebooted and had the database back!
Thanks for the Article!
We installed SP3 meanwhile and we still intend to use SSL, se we keep on
experimenting and I hope that the articles will guide us safely ...
Thanks again,
Marc|||Does anyone have any idea how or why this is happening to me all of a
sudden and what to do about it?
Win2000 Server, with SQL Server 2000, IIS, Been running applications and
SQL just fine for a long time and all of a sudden now getting this error
constantly:
[DBNETLIB][ConnectionOpen (SECCreateCredentials()).]SSL Security err
or.
ANY help would be greatly appreciated. I cannot find anything on the
net about this.
JWP
*** Sent via Developersdex http://www.codecomments.com ***
Don't just participate in USENET...get rewarded for it!

Installation Issues

I have installed MSDE2000A on both 2000 and XP Pro machines, the install
appears to go fine. After the reboot, the service manager icon is empty,
when I look for the services in the drop down in the Service Manager it is
empty. In the system services screen, I have made sure all three services
are running. I cannot restore a database on this machine or connect to it
with Enterprise Manager. Any thoughts or help is appreciated.
Hi ,
First of all when you say the msde installtion "appears" to be installed
fine , have you verified the setup log file to see if the msde did indeed
install sucessfully or if there are any messages
Please follow the steps mentioned below to solve the problem:
1) verify the setup log for any error messages (most probably the msde
wasnever installed properly in the first place)
2) Can you see the msde services in the services . Try to start them
manually
3) Connect to the instance locally with the followong command
<installdrive>\program files\microsoft sql server\80\tools\binn \osql -E
-Sservername\instancename
do not use the -S parameter if default instance is used.
4) If you connect successfully then the msde is correctly installed.
5) Ensure that the tcp/ip is enabled using the client configuration tool
(cliconfg.exe) and also the server network utility (svrnetcn.exe )
6) try manually typing the server name in the service manager when it comes
out empty and then try to connect
Girish Sundaram
This posting is provided "AS IS" with no warranties, and confers no rights.
|||I have seen this on Win 2003 where MSDE-Rel A is installed using an Instance
Name and there is no default instance.
Tim Morrison
"GrumpyOldMan" <GrumpyOldMan@.discussions.microsoft.com> wrote in message
news:7D74D170-FE18-4DAB-870C-DDCD89422968@.microsoft.com...
>I have installed MSDE2000A on both 2000 and XP Pro machines, the install
> appears to go fine. After the reboot, the service manager icon is empty,
> when I look for the services in the drop down in the Service Manager it is
> empty. In the system services screen, I have made sure all three services
> are running. I cannot restore a database on this machine or connect to it
> with Enterprise Manager. Any thoughts or help is appreciated.