How to recover from iisadmin startup "Error 0x80090016 – NTE_BAD_KEYSET"

Here is the short version:You need at least the 3.x package of JailBreak and a working IIS Server. The .Net Framework 2.0 (or later) must also be installed on both to give you the aspnet_regiis.exe tool. On the “broken” server backup the data to enable rollback:From %windir%\system32\}inetsrv save the metabase.xml and the history and metaback folders execute…


Strong name signing in Visual Studio 2005 requires KeySpec=2 (AT_SIGNATURE)

I had the pleasure to troubleshoot this interesing issue and feel this information might be helpful for everyone dealing with code signing. You might hit this when trying to use the same keyset for strongname signing as well as for manifest and/or Authenticode signing. As noted in this article Visual Studio 2005 cannot handle PKCS#12 files that…


Limit the List of Certification Authorities allowed for Client Authentication

This seem to be something a lot of people are interested in.   Problem: On Windows Server 2003 and Windows 2000 (since the MS04-011 update) you can’t use Certificate Trust Lists (CTL’s) for this target.   Reason: Previoously in IIS5 using the CTL wizard you could  ADD certificates to the list of allowed Certification Authorities (CA’s)…

1

Interesting problem with NavisionExample.pfx

Being back from a nice vacation in DomRep I just had an interesting issue. Upgrading to Windows 2000 SP4 from Windows 98 or Windows Me you might see problems when using the Navision Software with the German Elster Services (used to interface with the German tax institutions). Importing the NavisionExample.Pfx (supplied for Testing ONLY!) works…