installed ssl-certificate -> SQL-Server locked !

Hello NG,
we just installed a ssl-certificate (created with MS-selfssl) on the IIS of
a win2k-Server and since reboot the SQL-Server on the same machine cannot be
accessed anymore. The Enterprise Manager tells us "SSL Security Error.
ConnectionOpen (SECDoClientHandshake()).."
Meanwhile we deleted the certificate, but the server's still locked. What
can we do?
Greatful for any hint,
MarcMake sure that the "force Protocol encryption" option is removed from both
the
Server Network Utility and the CLient network Utility.
Once you remove the certificate, SQL must be restarted. Just MSSQLServer
service, not the machine.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Thanks Kevin,
But how can we modify the Database's options? They're locked as well.
Are there some command line options? How are they applied?
thanks,
Marc
"Kevin McDonnell [MSFT]" <kevmc@.online.microsoft.com> schrieb im Newsbei
trag
news:BtG697KIEHA.3772@.cpmsftngxa06.phx.gbl...
> Make sure that the "force Protocol encryption" option is removed from both
> the
> Server Network Utility and the CLient network Utility.
> Once you remove the certificate, SQL must be restarted. Just MSSQLServer
> service, not the machine.
>
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||There are no database options that relate to protocol encryption.
Does the server start?
Is the problem only establishing connections from Enterprise Manager?
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||Meanwhile I checked the two services : "force Protocol encryption" had
already been deactivated for both active protocols (Named Pipes and TCP/IP).
Before, we also removed the certificate. Nothing happened. The SQL-Server is
still locked.
General question : how can we use a ssl-certificate for the web-service
together with a SQL-Server on the same machine? As far as I experienced now,
this is a dangerous experiment if no real MS-Experts are around!? Are there
manuals available?
Still greatful for any hint,
Marc
"Kevin McDonnell [MSFT]" <kevmc@.online.microsoft.com> schrieb im Newsbei
trag
news:BtG697KIEHA.3772@.cpmsftngxa06.phx.gbl...
> Make sure that the "force Protocol encryption" option is removed from both
> the
> Server Network Utility and the CLient network Utility.
> Once you remove the certificate, SQL must be restarted. Just MSSQLServer
> service, not the machine.
>
> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||> There are no database options that relate to protocol encryption.
My mistake/misunderstanding - sorry!

> Does the server start?
It looks like. The green arrow shows up.

> Is the problem only establishing connections from Enterprise Manager?
No - all connections (ODBC, MS-Access).
Marc

> Thanks,
> Kevin McDonnell
> Microsoft Corporation
> This posting is provided AS IS with no warranties, and confers no rights.
>
>|||From previous post:
"General question : how can we use a ssl-certificate for the web-service
together with a SQL-Server on the same machine? As far as I experienced now,
this is a dangerous experiment if no real MS-Experts are around!? Are there
manuals available?"
For SQL 2000 to use protocol encryption, SSL, the server must have a
Certificate issued to the FQDN name of the computer.
This would be the same if you were to setup IIS for SSL using Server
Authentication. So, if IIS and SQL are on the same machine,
then you just need one certificate. You can use the IIS tools to install
the certificate, since SQL doesn't supply any user tools.
I wrote the following two articles. and did the Webcast on setting up SSL
with SQL 2000.
316898 HOW TO: Enable SSL Encryption for SQL Server 2000 with Microsoft
http://support.microsoft.com/?id=316898
276553 HOW TO: Enable SSL Encryption for SQL Server 2000 with Certificate
Server
http://support.microsoft.com/?id=276553
324777 Support WebCast: Microsoft SQL Server 2000: How to Configure SSL
http://support.microsoft.com/?id=324777
Hope this helps,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||I just replied to your earlier posting.
Thanks,
Kevin McDonnell
Microsoft Corporation
This posting is provided AS IS with no warranties, and confers no rights.|||> I wrote the following two articles. and did the Webcast on setting up SSL
> with SQL 2000.
> 316898 HOW TO: Enable SSL Encryption for SQL Server 2000 with Microsoft
> http://support.microsoft.com/?id=316898
Through this article I found that the certificate had not been deleted
completely. So I deleted the rest, rebooted and had the database back!
Thanks for the Article!
We installed SP3 meanwhile and we still intend to use SSL, se we keep on
experimenting and I hope that the articles will guide us safely ...
Thanks again,
Marc|||Does anyone have any idea how or why this is happening to me all of a
sudden and what to do about it?
Win2000 Server, with SQL Server 2000, IIS, Been running applications and
SQL just fine for a long time and all of a sudden now getting this error
constantly:
[DBNETLIB][ConnectionOpen (SECCreateCredentials()).]SSL Security err
or.
ANY help would be greatly appreciated. I cannot find anything on the
net about this.
JWP
*** Sent via Developersdex http://www.codecomments.com ***
Don't just participate in USENET...get rewarded for it!

Installation SQL-Cluster failed

Hi,
we are trying to install "SQL-Server Version 8.00.780 SP3" on a Win2003
2-node Cluster. The Installation breaks, and in the sqlstp.log we find the
Message "remsetup.exe not find". In the Knowledge Base we find problems with
Terminal Service (no TS installed) and with special character in connection
names (the names are public and private). We have log in as a domain admin
and the sql engine and the agent are started with a domain admin.
1.copyexe=cnvsvc1.exe
08:28:41 Setup is performing required operations on cluster nodes. This may
take a few minutes...
08:28:41 C:\WINDOWS\TEMP\SqlSetup\Bin\remsetup.exe C:\WINDOWS\remsetup.ini
08:30:14 Process Exit Code: (2) The system cannot find the file specified.
08:30:14 Begin Action : GetRemsetupRetCode
08:30:14 Installation return status on OBELIX : 2
08:30:14 End Action : GetRemsetupRetCode
#### SQL Server Remote Setup - Start Time 05/14/04 08:28:41 ####
CThreadPool::RunUntilCompleteHlpr create thread, index=0
CThread::Run thread [0x74] created for execution.
CThread::Process [0x74]
CThreadPool::RunUntilCompleteHlpr start thread [0x74],index=0
Script file copied to '\\OBELIX\ADMIN$\OBELIX_MSSQLSERVER.iss' successfully.
Installing remote service (OBELIX)...
Running '\\ASTERIX\Z$\x86\setup\setupsql.exe k=ClSec k=Rm k=Cl -SMS -s -f
"\\ASTERIX\Z$\x86\setup\setup.ins" -f1
\\OBELIX\ADMIN$\OBELIX_MSSQLSERVER.iss -f2 "\\OBELIX\admin$\setup.log" -e
"stpsilnt._ex" -x "C:\"' (OBELIX) ...
CRemoteProcess::RunUntilComplete [0x74] exit code: 2
Remote process exit code was '2' (OBELIX).
CThreadPool::RunUntilCompleteHlpr WaitForMultipleObjects returned: 0
CThreadPool::RunUntilCompleteHlpr signaled thread [0x74]
Thread [0x74] exit code: [0x2]
CThreadPool::RunUntilComplete returned 2
CThreadPool::RunUntilComplete execution level=1, need execution: 0
One or more errors occurred while running the remote/unattended setups.
Disconnecting from remote machine (OBELIX)...
Service removed successfully.
Remote files removed successfully.
#### SQL Server Remote Setup - Stop Time 05/14/04 08:30:14 ####
08:30:14 End Action : Run setup on cluster nodes
08:30:14 One or more errors occurred while running remote setup on the
clustered machines.
08:30:28 Setup failed to perform required operations on the cluster nodes.
08:30:28 Begin Action : ClusterErrorCleanup
08:30:28 End Action : ClusterErrorCleanup
08:30:28 End Action : ClusterSetupHelper
Thank you for help.
Sound to me like your MS cluster isn't installed correctly.
Have you carried out the tests suggested in the Cluster checklist?
If you are happy with the installation try copying the remsetup.ini file from the user dir as mentioned in KB301520.
|||Try these steps to see if you can resolve the problem:
1) Check and see if the machine is configured to disallow 8.3 name creation
by
checking the following registry key:
HKLM\SYSTEM\CURRENTCONTROLSET\CONTROL\FileSystem\N tfsDisable8dot3NameCreatio
n
A value of 1 means this is disabled and hence change it back to 0. This
requires a
reboot for it to take effect
OR
2) Change the TEMP and TMP User Environment Variables to a path that does
not have
spaces in them. For example: c:\temp. Use the SET command to verify the new
TEMP
location is in effect. This does not require a reboot
Rand
This posting is provided "as is" with no warranties and confers no rights.

Installation from AdventureWorks

Hallo

I have reinstalled then SQL-Server.

Now I could found the Script instawdb.sql.

Our version from SQL Server 9.0.2047

and the language is German.

From where could download the script.

Thanks for your help.

Thomas

hi Thomas,

you can get the AdventureWorks install package from http://www.microsoft.com/downloads/details.aspx?FamilyID=E719ECF7-9F46-4312-AF89-6AD8702E4E6E&displaylang=en

regards