Server Certificate button unavailable in IIS

Symptoms

When you try to generate a certificate request by using the Internet Information Services (IIS) Certificate Wizard from the properties of a site, the Server Certificate button may be unavailable or you may receive an error message similar to the following:
The Instruction at "0X64e6a38e" referenced memory at 0X00000000. The memory could not be "read".

Note You may also see the IIS Manager close without error.

Cause

The Xenroll.dll file is not properly registered.

Resolution

Xenroll.dll is located in the \Winnt\System32 directory. Follow these steps to reregister Xenroll.dll:
  1. Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
  2. Click Start, click Run, and then type Regsvr32 in the text box.
  3. In Windows Explorer, locate Xenroll.dll in the \Winnt\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
  4. Click OK. A message box states that the Xenroll.dll registration is successful.
If registering the Xenroll.dll file does not resolve this issue, register the following additional files by using the same steps:
  • \%systemroot%\system32\inetsrv\certmap.ocx
  • \%systemroot%\system32\inetsrv\certwiz.ocx
Close the IIS Properties window, and then open the Web site properties. Verify that you can create a certificate request.

More Information

The Certwiz.ocx control wizard calls the Xenroll.dll dynamic-link library (DLL) when you click Server Certificate.

Steps to reproduce the behavior

  1. Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
  2. Click Start, click Run, and then type Regsvr32 /u in the text box.
  3. In Windows Explorer, locate Xenroll.dll in the \WINNT\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
  4. Click OK. A message box states that the Xenroll.dll unregistration is successful.
  5. Open the IIS Service Manager Microsoft Management Console (MMC), right-click a Web site, and then click Properties.
  6. In the site property window, click the Directory Security tab.
  7. Click Server Certificate to open the IIS Certificate Wizard. You receive the error message that is described in the "Symptoms" section.

References

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

228821 Generating a certificate request file using the Certificate Wizard in IIS 5.0

290625 How to configure SSL in a Windows 2000 IIS 5.0 test environment by using Certificate Server 2.0

Proprietăți

ID articol: 306667 - Ultima examinare: 30 iul. 2008 - Revizie: 1

Feedback