Schannel error

[vpont]

Hello,

I am receiving this error on my domain controller. What
does this mean? Thank you.

Event Type: Error
Event Source: Schannel
Event Category: None
Event ID: 36870
Date: 2/2/2004
Time: 9:46:20 AM
User: N/A
Computer: DC-1
Description:
A fatal error occurred when attempting to access the SSL
server credential private key. The error code returned
from the cryptographic module is 0xffffffff.

 

[a-chadl [MSFT]]

| Hello,
|
| I am receiving this error on my domain controller. What
| does this mean? Thank you.
|
| Event Type: Error
| Event Source: Schannel
| Event Category: None
| Event ID: 36870
| Date: 2/2/2004
| Time: 9:46:20 AM
| User: N/A
| Computer: DC-1
| Description:
| A fatal error occurred when attempting to access the SSL
| server credential private key. The error code returned
| from the cryptographic module is 0xffffffff.
|
|

Hello,

This error usually indicates that your computer cannot complete the trust
chain on the certificate that you are using for schannel. Use "dsstore
-dcmon" and look at a verbose display. Correct the trust chain on the
certificate that you are using for schannel.

!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Please note that deleting certificates is a drastic step and is typically
only done
in specific cases where there are duplicate certificates or certificates
which are
so badly corrupted they cannot be handled via the UI.
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

If there are bad certificates choose the "delete bad"

Note: doing this on a Windows2000 domain controller will purge Kerberos KDC
keys,
causing a difficult to recover from scenero. Do not do this if you do not
know
what you are doing.

I hope this information helps.

Chad A. Lacy
Windows 2000 Directory Services

==================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
==================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[vpont]

Does this have anything to do with the replication of ADS?