IIS Error after moving database to another SQL Server (certificate not found)

Question

Hi,

today I tried to Upgrade our Safeguard Enterprise 6.0.xx.x Instalation to Version 6.1, so that Windows 8 is supported.

I did the "Best practice update manual" step by step and here was my first problem.

SQL Server 2005 is no longer supported.

So I searched the Knowledgebase and found something on how to move an Safeguard Database.

I created a new Safeguard Database with the Version we now use with the scripts from the installation files.

Then I restored it, with the Backup from the old SQL Server.

Next step I took the "old" Database offline und then restarted our sophos server.

The next time I tried to open the Management Center I had to reconfigure the database connection and then I was online again.

Here I build a new server configuration and installed it.

Reboot

But now the IIS which the clients communicate to, isn´t working anymore.

I can access the website and make the "CheckConnection".

Here I get:

<?xml version="1.0" encoding="UTF-8"?>

<string xmlns="http://tempuri.org/"><Dataroot><WebService>OK</WebService>< DBAuth>failed</DBAuth> <Error>Zertifikat nicht gefunden</Error></Dataroot></string>

Can anyone tell me, which certificate could be the problem.

Thanks

This thread was automatically locked due to age.

ChrisD · Accepted Answer

Hi Melchor, this issue is probably caused due to an incorrect certificate that was used to register the SafeGuard Enterprise Server when creating a new Server configuraiton package.  To resolve the issue, the SafeGuard Enterprise Server has to be registered with the Machine Certificate of the SafeGuard Enterprise Server that can be found on the Server machine at  %programfiles%\Sophos\SafeGuard Enterprise\MachCert\ I'll suggest to perform the following steps: Uninstall the SafeGuard Server Configuration package from add/remove programs Open the SafeGuard Management Centre and browse to: Tools | Configuration Package Tool... Remove the incorrect server entry under the 'Register Server' tab (Highlight entry and click 'Remove') Remove the incorrect server configuration package under 'Create Server Configuration Package' (Highlight entry and click 'Remove') Register the server under the 'Register Server' tab by clicking on Add. Click on '...' under 'Please select the server certificate:' and browse to the location of the server certificate: %programfiles%\Sophos\SafeGuard Enterprise\MachCert\ (make sure to select the Certificate from the SafeGuard Enterprise Server machine and not any other machine) Click OK Click OK to the add register server Go to the 'Create Server Configuration Package' and highlight the new entry Choose an output path for the msi Install the new server configuration msi and restart the server once Re-run the invoke test. Hope that helps, ChrisD :49052