« Previous Next »

Thread: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

Last post 08-04-2009 8:25 AM by neilos. 32 replies.

Average Rating Rate It (5)

RSS

Page 1 of 3 (33 items) 1 2 3 Next >

Sort Posts:

Shortcuts

Search | Active Posts | Unanswered Posts | View all users

  • 06-15-2009, 10:17 AM

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Hi All,

    We have a server running Windows Server 2008 Ent Edn SP1 and have one website configured in IIS that is bound to both HTTP and SSL traffic.  Every time we reboot the server the SSL cerificate is dropped, we have the following registered in the system event log:

    HTTPEvent - 15300 (Warning)
    SSL Certificate Settings deleted for Port : 192.168.152.94:443 .

    HTTPEvent - 15016 (Error)
    Unable to initialize the security package Kerberos for server side authentication. The data field contains the error number.

    I've had a look online and tried assigning it too all IPs rather than a specific one but still the SSL cert gets dropped, please can someone advise on how to fix this issue.

    Regards
    Neilos

     
    Tags:

  • 06-15-2009, 10:21 AM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Is this server part of Domain or a workgroup?

    Is the site configured a MOSS site?

    neilos:
    HTTPEvent - 15300 (Warning)
    SSL Certificate Settings deleted for Port : 192.168.152.94:443 .

    http://technet.microsoft.com/en-us/library/cc736054.aspx - This article says " HTTP Service SSL Auditing provides information about the service, but does not indicate whether the service is in a normal or error state"

    ~ Ganesh

  • 06-15-2009, 10:52 AM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

     

    Hi,

    Thanks for the quick reply, it's not a MOSS site and is not in a domain.  I had been on the link you sent me before, unfortunately it doesn't offer any workarounds for this particular issue.  Thanks in advance for any assistance.

    Regards

    Neil

  • 06-16-2009, 9:41 AM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact
    what do you have in the box? app? doubt IIS dropped the setting by itself.
    Cheers,
    Bernard Cheah

  • 06-16-2009, 11:20 AM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

     

    I've got installed:

    Google Siremap Generator, SQL Server 2008, Evault Backup Agent, Dell Server Administrator and thats about it....

    Thanks in advance

    Neilos 

     

  • 06-18-2009, 5:54 AM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    The SSL certificate was dropped last night at 8:27pm, it also corresponds with entries in the security log at exactly the same time, as per below:

    The Windows Filtering Platform has blocked a bind to a local port.

    Application Information:
    Process ID: 1588
    Application Name: \device\harddiskvolume1\windows\system32\inetsrv\inetinfo.exe

    Network Information:
    Source Address: 127.0.0.1
    Source Port: 3456
    Protocol: 17

    Filter Information:
    Filter Run-Time ID: 0
    Layer Name: Resource Assignment
    Layer Run-Time ID: 36



    and



    The Windows Filtering Platform has blocked a bind to a local port.

    Application Information:
    Process ID: 320
    Application Name: \device\harddiskvolume1\windows\system32\svchost.exe

    Network Information:
    Source Address: 0.0.0.0
    Source Port: 123
    Protocol: 17

    Filter Information:
    Filter Run-Time ID: 0
    Layer Name: Resource Assignment
    Layer Run-Time ID: 36

    Any ideas?

    Regards
    Neil
     

  • 06-18-2009, 8:59 AM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Check this Kb out and see applying this hotfix helps to fix this issue:

    969257 Many 5159 events are logged in the Security event log after you disable Windows Firewall and enable the "Filtering Platform Connection" auditing policy
    http://support.microsoft.com/default.aspx?scid=kb;EN-US;969257

    HTH.

    ~ Ganesh

  • 06-24-2009, 9:12 AM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Per that KB, even if such event is logged, the binding will still proceed. In your case, not only it can't the port, and the SSL setting was dropped as well.

    Did you able to solve the issue? I'm curious about the fix.

    Cheers,
    Bernard Cheah

  • 06-25-2009, 6:42 AM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    I'm hopefully going to test the patch to see if it fixes it this Sunday, I'll let you know how it goes.

    Neil

  • 06-30-2009, 4:52 AM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact
    And it's Tuesday in APAC :) any update?
    Cheers,
    Bernard Cheah

  • 07-02-2009, 10:25 AM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Tested applying the patch this morning and rebooted, hvane't seen the error (Event ID 5159 - The Windows Filtering Platform has blocked a bind to a local port.) in the security log since however it hasn't fixed the issue with the SSL certificate that is bound to a website being dropped on a reboot.

    Any other ideas are very welcome, thanks in advance for your assistance.

    Regards

    Neil

     

     

  • 07-06-2009, 5:38 AM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Hey Guys,

    Any news or further advice on this as it would be greatly appreciated...Thanks again in advnace.

    Regards

    Neil

  • 07-07-2009, 10:14 AM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact
    So the ssl config drop is still there. what else do you run in the box? I'm so curious about the behavior, somewhere/somehow change the IIS config files. do you have audit enable for the config files?
    Cheers,
    Bernard Cheah

  • 07-07-2009, 12:03 PM In reply to

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

    Hello,

     I have exactly the same issue. I have only Windows 2008 Web Server and Sql Server 2008 Express (With Advanced Services) running on this box. Clean installations.

    This box is a virtual machine if this changes anything (hosted inside hyper-v).

    There are two network interfaces: one local and one publc.

  • 07-07-2009, 12:58 PM In reply to

    • neilos
    • Top 500 Contributor
    • Joined on 05-16-2007, 10:08 AM
    • Posts 18

    Re: Windows 2008, IIS 7 Drops SSL Certificate after Reboot

    Reply Contact

     

    Interestingly my server also has SQL Server 2008 Workgroup Edn installed on a Windows 2008 64bit platform.

    I've created a virtual machine that has W2008 with the same site and same SSL and that works, tomorrow I'll install SQL 2008 and see if that is the cause of the problems.

    Regards

    Neil
Page 1 of 3 (33 items) 1 2 3 Next >
Microsoft Communities