This article was previously published under Q309398
When you try to install Microsoft SQL Server 2000 on a computer that has certificates, installation can fail and you may receive the following error message:
[Microsoft][ODBC SQL Server Driver][Shared Memory]SSL Security error [Microsoft][ODBC SQL Server Driver][Shared Memory]ConnectionOpen (SECDoClientHandshake()). SQL Server configuration failed.
When you add certificates to a server that already has SQL Server installed, local connections fail.
Certificates that exist on the server.
Certificates install for various reasons. The most common are:
Certificates you use to sign e-mail digitally.
Certificates you use on a wireless network for security reasons.
SQL Server 2000 introduces Secure Sockets Layer (SSL) encryption through the use of certificates. If SQL Server finds certificates on the local computer, SQL Server attempts to use the certificates. If the certificate is not issued to the fully qualified domain name of the computer, SQL Server considers the certificate invalid. If there are multiple certificates on the computer, there is no way to pick which certificate SQL Server must use.
You must identify the source of the certificates on the computer before you proceed. For the SQL Server 2000 installation to be successful, you must use the Microsoft Management Console (MMC) snap-in to view the certificates on your computer.
How to Use the MMC Snap-in to View Certificates
To use the MMC snap-in to view certificates, use these steps:
Click Start, and then click Run. In the Run dialog box, type the following then click OK:
At a command prompt, type the following, and then press ENTER:
On the Console menu, click Add/Remove Snap-in. (From the File Menu if you're using Windows XP).
Click the Standalone tab.
On the Add Standalone Snap-ins: under Dialog, select Certificates, and then click Add.
Select My User Account.
Select Certificates, and then click Add.
Click to select Computer Account.
Click to select Local Computer.
On the Add Standalone Snap-ins: under Dialog,click Close.
In the Add/Remove Snap-In dialog box, click OK.
You can use the MMC console to identify the certificates at these locations:
Certificates (local computer) Personal CertificatesCertificates-Current User Personal Certificates
To install SQL Server 2000 successfully, export the certificates to a file, and then delete the certificates from the Certificate MMC snap-in. After you successfully install SQL Server 2000: