On Friday the 13th this KB 5005043 got installed on Windows 2016 server. Our application which reads an encrypted connectionstrings.config through a web.config file suddenly started complaining.
Message : Failed to decrypt using provider 'RsaProtectedConfigurationProvider'. Error message from the provider: The data to be decrypted exceeds the maximum for this modulus of 128 bytes.
The web.config / connectionstrings.config hasn't changed since 8/3 (and still hasn't), the application was running since then without an issue until the morning of 8/13 when the 'failed to decrypt' errors started appearing. The only connection we see is that this Windows KB got applied on the same day. The only known issue that the KB mentions is something about Windows 2008 SP2 (who runs this??)
Has anyone seen a similar issue?
Open aspnet_regiis.exe tool and execute as Administrator, try to use this command aspnet_regiis -pa.
More information you can refer to this link: Encrypting and Decrypting Configuration Sections.
Related
Running IIS 7.5 on Win2008. Trying to change the App Pool Identity to Administrator user. When I click OK on the dialog, I get this error: "Not enough storage is available to process this command. (Exception from HRESULT: 0x80070008)
I have tried IISRest and also Restart the sever But issue didn't fix.
Below is the error from Event Viewer
An update conflict has occurred, and you must re-try this action. The object SearchDataAccessServiceInstance was updated by EDC2010-TEST\SPDatabaseConfig, in the OWSTIMER (1172) process, on machine EDC2010-TEST. View the tracing log for more information about the conflict.
Try to re-install IIS by using the server manager. According to Microsoft, this is a machine key corruption issue, which is used to encrypt and decrypt application pool identity credentials.
https://forums.iis.net/t/1180041.aspx
This is a Microsoft system-level problem, namely running out of interrupt request stack space, which can be fixed by making a registry change to allocate a larger IRPStackSize. It is discussed in the below link.
https://support.microsoft.com/en-us/help/106167/error-message-not-enough-server-storage-is-available-to-process-this-c
https://appuals.com/fix-not-enough-storage-available-process-command/
Feel free to let me know if there is anything I can help with.
This has solved the problem for me.
So I had a similar error and I could not find a resolve in any forums.
I'm using the "WMI Provider Host" to edit bindings in IIS using VBScript.
Anyways after trying a few suggestions such as netsh http delete sslcert ipport=0.0.0.0:443 Here and editing the registry HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters > IRPStackSize Here.
I noticed when running my application the "WMI Provider Host" was getting to ±512MB in the ram and found that C:\Windows\System32\inetsrv\config\applicationHost.config was well over that size.
That's when I found this link to increase the memory allocation to the service.
Hopefully it helps.
I have a running installation of xRM Portals with Dynamics 365 8.2 On-premise. Everything works fine. ButI have the problem, that the settings.xml file gets corrupted every night - I can't explain why. I have the problem described in the following blogpost:
https://dynamics365authority.com/Blog/adxcrm-portal-cryptographic-operation-error-while-opening-adx-portal-from-iis
After deleting the settings.xml and reconfiguration everything works fine. But just for one day. After returning to the office the next day, the settings are again broken.
What can I do to fix this?
Got the solution here: https://github.com/Adoxio/xRM-Portals-Community-Edition/issues/99
Due to daily app pool recycling we had a new auto generated machine key every day. With a dedicated machine key in the web.config this problem is solved! The password hash uses the machine key.
Using v7.1 (that is the ver at cmd prompt), 3.6 (from web platform installer) of msdeploy.exe
Migrating from Win2008-R2 IIS to Win2012-R2
Attempting to move everything IIS related over. (And yes, we have customized applicatiohost.config, but we do not know all the mods... that is why we are using a migration tool,,, to move everything...)
Command I am running:
C:\Program Files\IIS\Microsoft Web Deploy V3>msdeploy
-verb:sync -source:webserver,
computername=WIN-67E8GTGADGJ
-dest:webserver,computername=192.168.2.21,
userName="administrator",password="###"
output:
Info: Using ID '1d59e6bd-0f89-4479-9853-98e164c9f613' for connections to the rem
ote server.
Info: Using ID '0c99bd7f-faa3-4737-ac35-d65c495402b6' for connections to the rem
ote server.
Info: Adding MSDeploy.webServer (MSDeploy.webServer).
Info: Adding webServer (MSDeploy.webServer/webServer).
Info: Adding appHostConfig ().
Error: (8/24/2015 10:28:43 PM) An error occurred when the request was processed on the remote computer.
Error: The ApplicationHost.config file is invalid. Cannot proceed with synchronization.
Error count: 1.
MORE INFORMATION
The sequence of events is:
Target system logs one error event:
Microsoft-Windows-IIS-APPHOSTSVC -- message 9000
And then msdeploy on the source system throws (and msdeploy exits):
Error: (8/25/2015 4:36:50 PM) An error occurred when the request was processed on the remote computer.
Error: The ApplicationHost.config file is invalid. Cannot proceed with synchronization.
Error count: 1.
UPDATE: Initially I was getting TWO event log errors on target system. Message 9000 and 9012. I was able to fix the 9012 by extending the applicationhost.config file. But hours of work and no solution yet for the 9000 error.
I have examined the ApplicationHost.config, and compared it to baseline, and there really seems to be nothing special there.
What is the path to resolution?
The answer is that there seems to be real problems with msdeploy, but no one seems to understand (or document) why. The tool is primarily built to go from IIS 6.x (Win 2003) to newer IIS.
In our experience, when going from IIS 7.x to 8.x, you often cannot use msdeploy with "source:webserver" approach. However, msdeploy can do a lot of the lifting for you from 7.x to 8.x.
Here are some steps I have seen work:
First, do three steps. This will let msdeploy move as much as it can (would be nice if it could move more, but this is as far as I have seen work):
msdeploy -verbose -verb:sync -source:apphostconfig="WEB SITE NAME",computername=SOURCEMACHINE -dest:apphostconfig="WEB SITE NAME",computername=DESTINATIONMACHINE,userName="administrator",password="password-here" -enableLink:AppPoolExtension
Note the "enablelink" flag.
Repeat the above with:
-enableLink:CertificateExtension
and then
-enableLink:FrameworkConf
Once this is done, msdeploy has done all it can. You should now have the site migrated, with content and app pools, and ssl certs, and the configuration related to the sites and app pools.
For mime mappings, and other IIS system wide settings (compression is one example), you are on your own.
Don't ask me why there is no document on how to do this. (Don't ask me why msdeploy can't just do the whole freaking server. It works great from IIS 6, but not from IIS 7, like what kind of crazy is that? Anyway, send Satya an email about it.)
I get the following error while saving a task inside task list:
"The server was unable to save the form at this time. Please try again."
I tried restarting "search service host controller".
The server has 8 GB RAM and according to task manager, 6.67 GB is being used.
I logged into the site with user which is the owner of the site. I tried creating tasks from client as well as the SharePoint server itself. Same error is shown in both the cases.
How do I find information on the exact problem that is causing the error? What are possible solutions?
I have found this to be directly related to the Search Host Controller Service. This apparently is gobbling up all the memory on the WFE. Once restarted I can now save the form items. I watched it regress from 8gb (max on this server) to about 6.7gb and suddenly this red error went away. I plan on doubling the memory to 16gb to try to remove the problem altogether.
I have recently been receiving the following error whenever I am asked to supply the host username and password in Oracle DataGuard's Enterprise Manager (EM) tool: RemoteOperationException: Error reading error from command. Any configuration or management that needs to be performed and requires the host credentials is throwing this error. This is one of the most unhelpful errors I have seen in a long time. I have checked all of the log files I can think of and I can't find any error logs or indications to the problem. I verified that I can log into the servers with the credentials that I was trying in EM, I verified the connection configuration through EM using the built in test tools, and I verified that all of the saved passwords in EM were correct. This was working on the initial installation. Sometime over the last couple of weeks it stopped working and I'm not sure why. The hosts are running Linux Red Hat 4 Enterprise and Oracle 10g.
Reinstalling the OEM agents fixed this issue. Somehow, all of the agents seemed to be corrupt.