Microsoft Knowledge Base Email Alertz

When you try to generate a certificate request by using the Internet Information Services (IIS) Certificate Wizard from the properties of a site, the

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 306667 - Last Review: December 3, 2007 - Revision: 5.3

Server Certificate button unavailable in IIS

This article was previously published under Q306667

On This Page

SYMPTOMS

When you try to generate a certificate request by using the Internet Information Services (IIS) Certificate Wizard from the properties of a site, the Server Certificate button may be unavailable or you may receive an error message similar to the following:
The Instruction at "0X64e6a38e" referenced memory at 0X00000000. The memory could not be "read".

Note You may also see the IIS Manager close without error.

CAUSE

The Xenroll.dll file is not properly registered.

RESOLUTION

Xenroll.dll is located in the \Winnt\System32 directory. Follow these steps to reregister Xenroll.dll:
  1. Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
  2. Click Start, click Run, and then type Regsvr32 in the text box.
  3. In Windows Explorer, locate Xenroll.dll in the \Winnt\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
  4. Click OK. A message box states that the Xenroll.dll registration is successful.
If registering the Xenroll.dll file does not resolve this issue, register the following additional files by using the same steps:
  • \%systemroot%\system32\inetsrv\certmap.ocx
  • \%systemroot%\system32\inetsrv\certwiz.ocx
Close the IIS Properties window, and then open the Web site properties. Verify that you can create a certificate request.

MORE INFORMATION

The Certwiz.ocx control wizard calls the Xenroll.dll dynamic-link library (DLL) when you click Server Certificate.

Steps to reproduce the behavior

  1. Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
  2. Click Start, click Run, and then type Regsvr32 /u in the text box.
  3. In Windows Explorer, locate Xenroll.dll in the \WINNT\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
  4. Click OK. A message box states that the Xenroll.dll unregistration is successful.
  5. Open the IIS Service Manager Microsoft Management Console (MMC), right-click a Web site, and then click Properties.
  6. In the site property window, click the Directory Security tab.
  7. Click Server Certificate to open the IIS Certificate Wizard. You receive the error message that is described in the "Symptoms" section.

REFERENCES

For more information, click the following article number to view the article in the Microsoft Knowledge Base:
228821  (http://kbalertz.com/Feedback.aspx?kbNumber=228821/ ) Generating a certificate request file using the Certificate Wizard in IIS 5.0
290625  (http://kbalertz.com/Feedback.aspx?kbNumber=290625/ ) How to configure SSL in a Windows 2000 IIS 5.0 test environment by using Certificate Server 2.0

APPLIES TO
  • Microsoft Internet Information Services 5.0
  • Microsoft Internet Information Services 6.0
Keywords: 
kbpending kbprb KB306667
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate