Microsoft Knowledge Base Email Alertz

You receive a Failed to generate the certificate request error message when you try create a certificate request in IIS

Search KbAlertz

Advanced Search

Receive Microsoft Knowledge Base articles by E-Mail?

Every night we scan the Microsoft Knowledge Base. If technologies you're interested in are updated, we'll send you an e-mail. You only get one e-mail a day, and only when new articles are added.

Click here to create a
FREE account
Already have an account?
[Click here to Login]











Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved. Terms of Use | Trademarks

Article ID: 908572 - Last Review: December 3, 2007 - Revision: 1.2

You receive a "Failed to generate the certificate request" error message when you try create a certificate request in IIS

SYMPTOMS

When you try to create a certificate request in Microsoft Internet Information Services (IIS), you may receive an error message that is similar to the following:
Failed to generate the certificate request. Access is denied.

CAUSE

This issue occurs if the administrator who tries to create the certificate request does not have Full Control permissions on the files and the subfolders in the following folder:
\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys

RESOLUTION

To resolve this issue, grant the administrator account Full Control on all files and subfolders in the MachineKeys folder. To do this, follow these steps:
  1. Click Start, click Run, type "\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\", and then click OK.
  2. Right-click MachineKeys, and then click Properties.
  3. On the Security tab, click Administrator or click the administrator group account you want, click to select the check box to enable Full Control permissions, and then click OK.

REFERENCES

For more information about the default permissions for the MachineKeys folders in Microsoft Windows 2000 and in Microsoft Windows NT 4.0 Server, click the following article number to view the article in the Microsoft Knowledge Base:
278381  (http://kbalertz.com/Feedback.aspx?kbNumber=278381/ ) Default permissions for the MachineKeys folders
For more information about default permissions and user rights in IIS 6.0, click the following article number to view the article in the Microsoft Knowledge Base:
812614  (http://kbalertz.com/Feedback.aspx?kbNumber=812614/ ) Default permissions and user rights for IIS 6.0
For more information about how to set required NTFS file system permissions and user rights for an IIS 5.0 Web server, click the following article number to view the article in the Microsoft Knowledge Base:
271071  (http://kbalertz.com/Feedback.aspx?kbNumber=271071/ ) How to set required NTFS file system permissions and user rights for an IIS 5.0 Web server

APPLIES TO
  • Microsoft Internet Information Services 6.0
  • Microsoft Internet Information Services 5.1
  • Microsoft Internet Information Services 5.0
Keywords: 
kbtshoot kbprb KB908572
       

Community Feedback System

Very often, it takes hours to solve a problem. Very often, you've looked high and low, and have tried a lot of solutions. When you finally found it, chances are, it was because someone else helped you. Here's your chance to give back. Use our community feedback tool to let others know what worked for you and what didn't.

Please also understand that the community feedback system is not warranted to be correct, it's simply a system that we've built to let people try and help each other. If something in a feedback response doesn't make sense to you, or you're not comfortable making changes that the feedback talks about (like registry edits), please consult a professional.

Thank you for using kbAlertz.com Feedback System.

-- Scott Cate

Mike Galusha Report As Irrelevant  
Written: 2/20/2006 3:13 PM
Thanks. I've had to fix this before and it took forever to find the answer. I recalled it was a permissions problem but wasn't sure where. Fortunately your page turned up in a search and had the correct information. Thanks.

Bane Report As Irrelevant  
Written: 5/30/2008 6:32 AM
Thanks! Fixed the problem.

Robert J Collins - http://www.brisingergroup.com/ Report As Irrelevant  
Written: 8/27/2008 8:30 PM
This worked perfectly. Thank you so much.