Microsoft KB Archive/288207

= PRB: IISSYNC May Fail If SSL Is Enabled on IIS 5.0/Windows 2000 Cluster =

Article ID: 288207

Article Last Modified on 11/21/2006

-

APPLIES TO


 * Microsoft Windows 2000 Advanced Server
 * Microsoft Internet Information Services 5.0
 * Microsoft Cluster Server 1.1

-



This article was previously published under Q288207



SYMPTOMS
After you add a server certificate to Internet Information Services (IIS) to use Secure Sockets Layer (SSL) encryption, the IISSYNC utility may stop responding (hang) and fail to complete the synchronization of the two nodes.



RESOLUTION
To resolve this problem, follow these steps:

NOTE: All of the following steps are performed on Node A unless otherwise specified.
 * 1) Create a certificate request.
 * 2) Fill the certificate requests (for example, use Microsoft Certificate Server or a certificate authority such as VeriSign).

NOTE: If Microsoft Certificate Server creates the certificate, make sure that the root certificate authority (CA) is a trusted root CA, and then install the root CA into the Local Store if necessary.

For more information, see the &quot;References&quot; section.
 * 1) After you download the new certificate to Node A and before you install it, make a copy of the certificate, and place the copy on Node B.
 * 2) Install the certificate on Node A through the Internet Service Administrator (ISM), and set the appropriate configurations (for example, using the Server Certificate Wizard, click Process pending certificate).
 * 3) On Node B, double-click the certificate that you copied earlier, and then click Install Certificate. Complete the wizard, accepting all of the defaults.
 * 4) On Node A, run IISSYNC. The status should now return as &quot;Successful&quot;.

If you still do not receive a &quot;Successful&quot; status, you may want to contact Microsoft Support Services for additional assistance. To contact Microsoft Support Services, see the following Microsoft Web site:

http://support.microsoft.com

NOTE: In special cases, charges that are normally incurred for support calls may be canceled, if a Microsoft Support Professional determines that a specific update will resolve your problem. Normal support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

