PSS ID Number: Q170859
Article last modified on 11-12-1997
WinNT:2.0,3.0
winnt
======================================================================
---------------------------------------------------------------------
The information in this article applies to:
- Microsoft Internet Information Server versions 2.0 and 3.0
---------------------------------------------------------------------
SYMPTOMS
========
After you install a Secure Sockets Layer (SSL) certificate, the
Require Secure SSL Channel option in Internet Service Manager,
WWW Service Properties, Directory Properties is not available
(greyed out).
CAUSE
=====
There are several causes of this condition, including:
- The WWW service has not been stopped and restarted after
the certificate was installed.
- No registry entry exists for Sspifilt.dll in HKEY_LOCAL_MACHINE/
System/CurrentControlSet/Services/W3SVC/Parameters/Filter DLLs.
- The registry entry above exists, but it includes a space in the
full drive path description.
WORKAROUND
==========
WARNING: Using Registry Editor incorrectly can cause serious, system-wide
problems that may require you to reinstall Windows NT to correct them.
Microsoft cannot guarantee that any problems resulting from the use of
Registry Editor can be solved. Use this tool at your own risk.
For the causes above, implement the following workarounds, respectively:
1. Stop and restart the WWW service using Internet Service Manager.
2. Open Registry Editor. Open the registry to HKEY_LOCAL_MACHINE/
System/CurrentControlSet/Services/W3SVC/Parameters/Filter DLLs.
Enter the full path and file name for Sspifilt.dll file (usually
found in the %System%\System32\Inetsrv subdirectory) in the
registry value by double-clicking the value, then entering full
path and file name in the String Editor. Be sure to confirm that
the file exists in the path entered into the registry. Close the
registry by selecting Registry, Exit, then stop and restart the
WWW service.
3. If the full path and file name for the Sspifilt.dll file contains
any spaces in the registry value above, use the String editor to
remove the spaces, close the registry, then stop and restart the
WWW service.
Additional query words: ssl grey gray greyed out
======================================================================
Keywords : iisconfig kbusage
Version : WinNT:2.0,3.0
Platform : winnt
Hardware : ALPHA x86
Issue type : kbprb
Solution Type : kbworkaround
============================================================================
=
Copyright Microsoft Corporation 1997.
Yep on both. Even rebooted just for grins.
----------
> From: Frank Canode <fcanode@mc2k.com>
> To: ntisp@emerald.iea.com
> Subject: Re: Site Certificate Installation
> Date: Wednesday, April 22, 1998 12:30 PM
>
> Two "off the top of the head" thoughts
>
> 1. Did you commit all changes when you installed.
> 2. Did you stop and restart the web server.
>
>
>
> >We just purchased a site certificate from Verisign and installed it.
The
> >key manager indicates that the installation was successful, and that the
> >key is complete and usable. I have configured the key to use the IP
> >Address of our web site. When I open the Internet Service Manager and
try
> >to enable SSL, the option is grayed out and it says that SSL is not
> >installed. What am I missing?
>
> >The machine is NT 4 with the 128 bit US SP3 and IIS 3
>
>
> Thank you,
>
> Greg White
> Direct NET Communications
>
> ----------------------------------------------------------
> NTISP Mailing List listserver@emerald.iea.com
>
>
>
> ----------------------------------------------------------
> NTISP Mailing List listserver@emerald.iea.com
>
----------------------------------------------------------
NTISP Mailing List listserver@emerald.iea.com