Microsoft KB Archive/306667

= Server Certificate button unavailable in IIS =

Article ID: 306667

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft Internet Information Services 5.0
 * Microsoft Internet Information Services 6.0

-



This article was previously published under Q306667



SYMPTOMS
When you try to generate a certificate request by using the Internet Information Services (IIS) Certificate Wizard from the properties of a site, the Server Certificate button may be unavailable or you may receive an error message similar to the following:

The Instruction at &quot;0X64e6a38e&quot; referenced memory at 0X00000000. The memory could not be &quot;read&quot;.

Note You may also see the IIS Manager close without error.



CAUSE
The Xenroll.dll file is not properly registered.



RESOLUTION
Xenroll.dll is located in the \Winnt\System32 directory. Follow these steps to reregister Xenroll.dll:
 * 1) Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
 * 2) Click Start, click Run, and then type Regsvr32 in the text box.
 * 3) In Windows Explorer, locate Xenroll.dll in the \Winnt\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
 * 4) Click OK. A message box states that the Xenroll.dll registration is successful.

If registering the Xenroll.dll file does not resolve this issue, register the following additional files by using the same steps:
 * \%systemroot%\system32\inetsrv\certmap.ocx
 * \%systemroot%\system32\inetsrv\certwiz.ocx

Close the IIS Properties window, and then open the Web site properties. Verify that you can create a certificate request.



MORE INFORMATION
The Certwiz.ocx control wizard calls the Xenroll.dll dynamic-link library (DLL) when you click Server Certificate.

Steps to reproduce the behavior

 * 1) Open Windows Explorer, expand the Winnt directory, and then click the System32 directory.
 * 2) Click Start, click Run, and then type Regsvr32 /u in the text box.
 * 3) In Windows Explorer, locate Xenroll.dll in the \WINNT\System32 directory, and then drag Xenroll.dll into the text box that is described in step 2.
 * 4) Click OK. A message box states that the Xenroll.dll unregistration is successful.
 * 5) Open the IIS Service Manager Microsoft Management Console (MMC), right-click a Web site, and then click Properties.
 * 6) In the site property window, click the Directory Security tab.
 * 7) Click Server Certificate to open the IIS Certificate Wizard. You receive the error message that is described in the &quot;Symptoms&quot; section.

