The information in this article applies to:
SYMPTOMSWhen you install a certificate to a Microsoft Internet Information Server computer generated by the HTML-based Key Manager, there will be no indication of an error. However, HTTPS access will not be possible. Turning off the "Require secure channel SSL" option in the Microsoft Internet Service Manager, and stopping and restarting the service, will enable access via HTTP. CAUSEThe security strength of the Schannel.dll file that exists on the remote computer where the key request was generated does not match the security strength of the server on which the certificate is installed. RESOLUTIONThe security strength of the Schannel.dll file on the remote HTML requesting computer must match the security strength of the Schannel.dll file on the server that will use the generated certificate. WORKAROUND
Although it is possible to generate a functional key request from a
computer other than the one on which it will be used, using the computer
that will eventually use the key to create the request will avoid security
mismatches. When you use remote HTML management, it is imperative to check
and match the versions of Schannel.dll. To do this, use the following
procedure:
Keywords : |
Last Reviewed: May 4, 1999 © 2000 Microsoft Corporation. All rights reserved. Terms of Use. |