locked
MS SQL 2016 Set certificate SSL RRS feed

  • Question

  • HI!

    I try to set certificate for  MS SQL Server 2016. So, when I restart server - get the next error: 

    An unrecoverable error occurred while trying to access the private key of the SSL server credentials. The error code returned by the encryption module is 0x8009030D. Internal error status: 10001.

    How decide this problem? Please, tell me

    Wednesday, March 29, 2017 11:00 AM

Answers

  • Hi lyakhlyakh,

     

    This problem may be caused by that you import a strong private key protection and the application what is using this certificate cannot provide a password.

     

    You can delete the certificate and then reimport it by using the following steps:

     

    1. Open 'Run', type mmc, click Enter.
    2. Select file -> Add/Remove snap-in
    3. Add the Certificates in the Snap-in column to the right column with local computer.
    4. Navigate to Personal\Certificates and delete the problematic certificate.

     

    You can refer to this case: http://serverfault.com/questions/541364/how-to-fix-rdp-on-windows-server-2012

     

    Best Regards,

    Teige


    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    • Edited by Teige Gao Thursday, March 30, 2017 2:32 AM
    • Marked as answer by lyakhlyakh Thursday, March 30, 2017 7:52 AM
    Thursday, March 30, 2017 2:31 AM

All replies

  • Are you talking about protocol encyrption? You might need to remove the certificate to get this working again.
    Wednesday, March 29, 2017 12:37 PM
  • Hi lyakhlyakh,

     

    This problem may be caused by that you import a strong private key protection and the application what is using this certificate cannot provide a password.

     

    You can delete the certificate and then reimport it by using the following steps:

     

    1. Open 'Run', type mmc, click Enter.
    2. Select file -> Add/Remove snap-in
    3. Add the Certificates in the Snap-in column to the right column with local computer.
    4. Navigate to Personal\Certificates and delete the problematic certificate.

     

    You can refer to this case: http://serverfault.com/questions/541364/how-to-fix-rdp-on-windows-server-2012

     

    Best Regards,

    Teige


    MSDN Community Support
    Please remember to click "Mark as Answer" the responses that resolved your issue, and to click "Unmark as Answer" if not. This can be beneficial to other community members reading this thread. If you have any compliments or complaints to MSDN Support, feel free to contact MSDNFSF@microsoft.com.

    • Edited by Teige Gao Thursday, March 30, 2017 2:32 AM
    • Marked as answer by lyakhlyakh Thursday, March 30, 2017 7:52 AM
    Thursday, March 30, 2017 2:31 AM