Solved

Change from built in account to domain user for sql services causes SSl cert error

Posted on 2010-11-28
5
470 Views
Last Modified: 2012-06-27
All,

Have recently run through a program of creating defined SQL domain accounts to stop using the built in ones.

All has gone fine, except in multiple machines i get the below error

A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x80090016.

Im guessing this is due to the new domain user account not having access to the old SSL certs, I have linked them through SQL config manager>> protocols but the error still occurs.

is there any way i can give the new domain user rights to these certs, or if not are we ok to use the self generated certificates?

All help appreciated
0
Comment
Question by:slam69
  • 3
  • 2
5 Comments
 
LVL 12

Expert Comment

by:ill
ID: 34228397
try
1. logon on to desktop as sql service domain user
2. insert certificate as logged-in user
0
 
LVL 25

Author Comment

by:slam69
ID: 34229043
Ok,

im stuck at home with a bug now today so will try this when im back in teh office and let you know
0
 
LVL 25

Author Comment

by:slam69
ID: 34231760
hi ill, ok logged in as service user account and unless i give it local admin rights it wont find the cert, this is against what i want to do.

the cert says it comes with a private key so how best to give it teh certificacte without giving it local admin rights?

Many Thanks
0
 
LVL 12

Expert Comment

by:ill
ID: 34236547
I thought once you have the cert key cached for the account , you can remove the admin rights.
If the cert is downloaded each time you may try to:
1. use SQL proxy account or
2. set security on a box to allow non-admin user to write to directory where cert are stored
0
 
LVL 25

Accepted Solution

by:
slam69 earned 0 total points
ID: 34266181
Hi I had to use part of the 2003 tool kit which has an app that allows you to permission individual certificates in teh machine store for non -admin users. you do this through the command line and worked like a charm
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Suggested Solutions

Imagine a situation that you have installed SSL (http://en.wikipedia.org/wiki/Secure_Sockets_Layer) Certificate on your Cisco ASA (Cisco Adaptive Security Appliance) firewall. Installation of SSL certificate on ASA is an another topic for which you …
A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now