Microsoft KB Archive/908572

= You receive a &quot;Failed to generate the certificate request&quot; error message when you try create a certificate request in IIS =

Article ID: 908572

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Internet Information Services 6.0
 * Microsoft Internet Information Services 5.1
 * Microsoft Internet Information Services 5.0

-





SYMPTOMS
When you try to create a certificate request in Microsoft Internet Information Services (IIS), you may receive an error message that is similar to the following:

Failed to generate the certificate request. Access is denied.



CAUSE
This issue occurs if the administrator who tries to create the certificate request does not have Full Control permissions on the files and the subfolders in the following folder:

\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys



RESOLUTION
To resolve this issue, grant the administrator account Full Control on all files and subfolders in the MachineKeys folder. To do this, follow these steps:
 * 1) Click Start, click Run, type &quot;\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\&quot;, and then click OK.
 * 2) Right-click MachineKeys, and then click Properties.
 * 3) On the Security tab, click Administrator or click the administrator group account you want, click to select the check box to enable Full Control permissions, and then click OK.

