This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IIS Error after moving database to another SQL Server (certificate not found)

Hi,

today I tried to Upgrade our Safeguard Enterprise 6.0.xx.x Instalation to Version 6.1, so that Windows 8 is supported.

I did the "Best practice update manual" step by step and here was my first problem.

SQL Server 2005 is no longer supported.

So I searched the Knowledgebase and found something on how to move an Safeguard Database.

I created a new Safeguard Database with the Version we now use with the scripts from the installation files.

Then I restored it, with the Backup from the old SQL Server.

Next step I took the "old" Database offline und then restarted our sophos server.

The next time I tried to open the Management Center I had to reconfigure the database connection and then I was online again.

Here I build a new server configuration and installed it.

Reboot

But now the IIS which the clients communicate to, isn´t working anymore.

I can access the website and make the "CheckConnection".

Here I get:

<?xml version="1.0" encoding="UTF-8"?>

<string xmlns="http://tempuri.org/"><Dataroot><WebService>OK</WebService>< DBAuth>failed</DBAuth>  <Error>Zertifikat nicht gefunden</Error></Dataroot></string>

Can anyone tell me, which certificate could be the problem.

Thanks

:49018


This thread was automatically locked due to age.
  • Hi Melchor,

    this issue is probably caused due to an incorrect certificate that was used to register the SafeGuard Enterprise Server when creating a new Server configuraiton package. 

    To resolve the issue, the SafeGuard Enterprise Server has to be registered with the Machine Certificate of the SafeGuard Enterprise Server that can be found on the Server machine at %programfiles%\Sophos\SafeGuard Enterprise\MachCert\

    I'll suggest to perform the following steps:

    1. Uninstall the SafeGuard Server Configuration package from add/remove programs
    2. Open the SafeGuard Management Centre and browse to:
      Tools | Configuration Package Tool...
    3. Remove the incorrect server entry under the 'Register Server' tab (Highlight entry and click 'Remove')
    4. Remove the incorrect server configuration package under 'Create Server Configuration Package' (Highlight entry and click 'Remove')
    5. Register the server under the 'Register Server' tab by clicking on Add.
    6. Click on '...' under 'Please select the server certificate:' and browse to the location of the server certificate:
      %programfiles%\Sophos\SafeGuard Enterprise\MachCert\ (make sure to select the Certificate from the SafeGuard Enterprise Server machine and not any other machine)
    7. Click OK
    8. Click OK to the add register server
    9. Go to the 'Create Server Configuration Package' and highlight the new entry
    10. Choose an output path for the msi
    11. Install the new server configuration msi and restart the server once
    12. Re-run the invoke test.

    Hope that helps,

    ChrisD

    :49052
  • Hi ChrisD,

    thanks a lot for this step by step solution.

    That solved my Problem and now the connection is ok.

    My fault was, to take the new certificate, which is created each year and not the inital installation certificate.

    I think this hint will help some other people too.

    Big Thanks.

    kind regards

    Melchor

    :49068