Microsoft KB Archive/323273

= You Receive an Error Message When You Make a Secure Call After the Active Directory Migration Tool Is Used =

Article ID: 323273

Article Last Modified on 2/1/2007

-

APPLIES TO


 * Microsoft NetMeeting 3.01 Standard Edition
 * Microsoft NetMeeting 3.01 Standard Edition

-



This article was previously published under Q323273



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
If you are using Microsoft NetMeeting, when you try to make a secure call, you may receive the following error message:

NetMeeting was unable to place a secure call. The certificate you have chosen may not be usable with NetMeeting.



CAUSE
This issue may occur if:
 * The Active Directory Migration Tool was used on your network to migrate accounts and profiles. -and-


 * You are a new user with a different security identifier (SID). -and-


 * You do not have the privileges that you must have to call a previous user account's certificate.

Certain private keys are associated with per-user certificates. These private keys are locally encrypted in the registry by using logon information. The user who is logged on when NetMeeting installs the certificate is the only user who can use the private key.



RESOLUTION
To resolve this issue:  Delete the _NmMkCert registry key. To do so, you have to edit the registry.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To delete the _NmMkCert registry key:  Start Registry Editor (Regedt32.exe). Locate and then click the _NmMkCert value under the following key in the registry:

HKEY_CURRENT_USER\Software\Microsoft\Cryptography\UserKeys\_NmMkCert

 On the Edit menu, click Delete, and then click OK. Quit Registry Editor.</ol> </li> Generate a new default certificate: <ol style="list-style-type: lower-alpha;"> Start NetMeeting.</li> On the Tools menu, click Options.</li> Click the Security tab, and then click OK.</li> Repeat these steps for each NetMeeting user.</li></ol> </li></ol>

<div class="references_section">