Microsoft KB Archive/236585

-

The information in this article applies to:


 * Microsoft Windows NT Server version 4.0 SP5
 * Microsoft Windows NT Workstation version 4.0 SP5
 * Microsoft Windows NT Server, Enterprise Edition version 4.0 SP5
 * Microsoft Internet Explorer version 5 for Windows NT 4.0

-

SYMPTOMS
When you install the Client Server Runtime System (CSRSS) security hotfix from the appropriate Microsoft Web site, the following Cryptograph API (CAPI) error message may be displayed before you are prompted to restart your computer:

"CAPI: The install program could not open the signature file." NOTE: This issue does not affect the installation of the CSRSS security hotfix.

RESOLUTION
A supported fix that corrects this problem is now available from Microsoft, but it has not been fully regression tested and should be applied only to systems experiencing this specific problem. If you are not severely affected by this specific problem, Microsoft recommends that you wait for the next Windows NT 4.0 service pack that contains this fix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the fix. For a complete list of Microsoft Product Support Services phone numbers and information on support costs, please go to the following address on the World Wide Web:

http://www.microsoft.com/support/supportnet/overview/overview.asp

The English version of this fix should have the following file attributes or later:

Date      Time     Size      File name    Platform 06/25/99  03:56p    92,432   Hotfix.exe   x86 06/25/99  03:55p   152,336   Hotfix.exe   Alpha

NOTE: If this product was already installed on your computer when you purchased it from the Original Equipment Manufacturer (OEM) and you need this fix, please call the Pay Per Incident number listed on the above Web site. If you contact Microsoft to obtain this fix, and if it is determined that you only require the fix you requested, no fee will be charged. However, if you request additional technical support, and if your no-charge technical support period has expired, or if you are not eligible for standard no-charge technical support, you may be charged a non-refundable fee.

For more information about eligibility for no-charge technical support, see the following article in the Microsoft Knowledge Base:

"Q154871 Determining If You Are Eligible for No-Charge Technical Support"

STATUS
Microsoft has confirmed this to be a problem in the Microsoft products listed at the beginning of this article.

MORE INFORMATION
This situation has only occurred on a computer running Windows NT 4.0 installed with the 128-bit version of Service Pack 5 and operating Microsoft Internet Explorer version 5.

For more information on the symptoms of worker thread exhaustion and the function of the CSRSS Security Hotfix, see the Microsoft Security Bulletin MS99-021 at the following Microsoft Web site:

"http://www.microsoft.com/security/bulletins/ms99-021.asp" The CSRSS Security Hotfix is available for download at the following Microsoft Web site:

"ftp://ftp.microsoft.com/bussys/winnt/winnt-public/fixes/usa/nt40/Hotfixes-PostSP5/CSRSS-fix/" Additional query words:

Keywords         : ntsecurity ntsp kbbug4.00 kbfix4.00 NT4SP6Fix Version          : WINDOWS:5; winnt:4.0 SP5 Platform         : WINDOWS winnt Issue type       : kbbug Last Reviewed: July 12, 1999