“Keyset not found” error

re: “Keyset not found” error

SomeOCSGuy — Fri, 30 Apr 2010 14:16:23 GMT

You are my personal hero. I was getting a "keyset does not exist" error while trying to start services for an OCS Access Edge server. I knew the problem was related to permissions on certificates as it worked when I added the service account to the local Administrators but I shouldn't need to do that as another server worked without that level of access. After browsing several posts related to OCS to no avail, I ran across your post which obviously has nothing to do with OCS but the same resolution corrected my problem as when I exported the cert from the first server and imported to the second, the permissions on it became all jacked up. I just couldn't figure out where to manage the permissions on certs. it was a real "duh" moment for me. Did I mention how much I hate certificates?? Haha. Thanks dude!

Kim Cameron’s Identity Weblog » Including the whole spectrum of use cases

Kim Cameron’s Identity Weblog » Including the whole spectrum of use cases — Sat, 30 Jun 2007 21:03:16 GMT

Pingback from Kim Cameron’s Identity Weblog » Including the whole spectrum of use cases

Mostly Mr SQL » Blog Archive » GRRRR! Cardspace. What useless steaming pile...

Thu, 28 Jun 2007 01:00:25 GMT

Pingback from Mostly Mr SQL » Blog Archive » GRRRR! Cardspace. What useless steaming pile...

re: “Keyset not found” error

dominick — Tue, 19 Jun 2007 09:15:35 GMT

That's all?! Excellent.

But be aware that your main app has now read access to the "crown jewels"...

I discussed this here:

www.leastprivilege.com/CardSpaceAndDecryptingTokens.aspx

And have a solution for production environments here:

www.leastprivilege.com/TokenDecryptionServiceForCardSpace.aspx