XADM: Cluster Event ID 1121 Error Message "The Crypto Checkpoint for Cluster Resource..."

Article translations Article translations
Article ID: 262383 - View products that this article applies to.
This article was previously published under Q262383
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all

SYMPTOMS

An event error message may be logged in the System event log during a failover of an Exchange service:
Event Type: Error
Event Source: ClusSvc
Event ID: 1121
Description:
The crypto checkpoint for cluster resource 'sa1' could not be restored to the container name 'EXPWMGMT-44a028991371419ebf3cc0661fafe7c1'. The resource may not function correctly.
Data:
0000: 05 00 00 00

CAUSE

This problem can occur because every time that a cluster starts a resource (for example, during a failover), the cluster restores the registry key in which the cluster states from the last known good state are kept. A security descriptor is set on the key container, by default, to which the local system account has full privileges, but to which administrators have read-only privileges. The first time that a failover occurs, the key file is created and the security descriptor is set. The next time that a failover occurs, the key container already exists, but the cluster checkpoint code updates the key anyway. Because the key container has a security descriptor that does not allow the key container to be overwritten by the cluster service account, the cluster falls back to the restore privilege and updates the key. Then the security descriptor is set, but there is no fallback with the restore privilege in this case, therefore restoration does not work and generates the error message in the System event log.

RESOLUTION

To resolve this problem, please contact Microsoft Product Support Services for assistance.

The latest service pack contains fixes that prevent the problem from recurring once it has been repaired. For additional information about how to obtain the latest Service Pack for Microsoft Exchange 2000 Server, click the article number below to view the article in the Microsoft Knowledge Base:
301378 XGEN: How to Obtain the Latest Exchange 2000 Server Service Pack

STATUS

Microsoft has confirmed that this is a problem in Microsoft Exchange 2000 Server. This problem was first corrected in Microsoft Exchange 2000 Server Service Pack 2.

NOTE: Installing Service Pack 2 will protect the server from developing this problem in the future, but will not repair existing incorrect checkpoint permissions. For additional information about how to fix checkpoint permissions, click the following article number to view the article in the Microsoft Knowledge Base:
307469 Restore Registry Check Points Stop Working After You Restore a Server Cluster

MORE INFORMATION

The cause of this error message has no impact on the operation of the resources that are running in the cluster, and you can safely ignore this error message.

Properties

Article ID: 262383 - Last Review: October 20, 2013 - Revision: 2.5
APPLIES TO
  • Microsoft Exchange 2000 Server Standard Edition
Keywords: 
kbnosurvey kbarchive kbbug kberrmsg kbexchange2000sp2fix kbfix KB262383

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com