IIS8键集不存在 [英] IIS8 Keyset does not exist
问题描述
我重新启动了我们的服务器2012框，它托管我们新的.net应用程序。这样做之后，我开始收到503错误。经过调查，这似乎是一个身份问题。
在进一步说明之前，我应该说这个帐户已经工作了几个月了。我之前已经重新启动了，一切都很顺利。
所以我在日志中得到（很常见的）5059,5057和5021错误。他们归结为：
I rebooted our server 2012 box, which hosts our new .net applications. After doing so, I started receiving a 503 error. Upon investigation, it seemed like an identity problem.
Before going much further, I should state that this account has worked for several months now. I've rebooted before, and everything started fine.
So I'm getting the (quite common) 5059, 5057, and 5021 errors in the log. They boil down to this:
应用程序池SVFileUpload的标识是无效的。为身份指定的用户名或密码可能不正确，或者用户可能没有批量登录权限。如果未更正标识，则在应用程序池收到第一个请求时将禁用应用程序池。如果批处理登录权限导致问题，则在Windows进程激活服务（WAS）重试登录之前，必须在授予权限后更改IIS配置存储中的标识。如果在处理完第一次应用程序池请求后标识仍然无效，则将禁用应用程序池。数据字段包含错误编号。
The identity of application pool SVFileUpload is invalid. The user name or password that is specified for the identity may be incorrect, or the user may not have batch logon rights. If the identity is not corrected, the application pool will be disabled when the application pool receives its first request. If batch logon rights are causing the problem, the identity in the IIS configuration store must be changed after rights have been granted before Windows Process Activation Service (WAS) can retry the logon. If the identity remains invalid after the first request for the application pool is processed, the application pool will be disabled. The data field contains the error number.
我以为我只是确保密码和帐户是正确的，所以我转到应用程序池，选择identity->自定义并确保其设置正确。我收到一个错误：
I thought I would just ensure the password and account were correct, so I go to the application pool, select identity-> custom and ensure it's set up right. I get an error:
执行此操作时出错操作。详细信息：Keyset不存在（HRESULT异常：0x80090016）
There was an error while performing this operation. Details: Keyset does not exist (Exception from HRESULT: 0x80090016)
这对我来说很奇怪，所以我尝试将应用程序池设置为内置帐号，它工作正常。每当我尝试设置自定义帐户时，我都会收到此错误消息。此外，没有使用自定义帐户的应用程序池将运行。
我用Google搜索了一下，不确定哪个错误是我需要跟踪的错误。我试过了：
- 通过aspnet_工具在命令行注册帐号
- 确保用户在IIS_IUSRS组中
- 更改C：\ProgramData \ Microoft \ Crypto \ RSA \MachineKeys文件的权限
- 添加一个全新的用户并尝试设置一个应用程序池到该用户帐户
还有一些其他随机的东西我用谷歌搜索但我不记得了。
这个错误对我来说没有意义，而且似乎是随机的。我需要帮助搞清楚1）为什么我不能将应用程序池设置为自定义帐户2）为什么身份不再适用于我的应用程序
This was strange to me, so I tried setting the app pool to a built in account, and it worked fine. I get this error anytime I try to set to a custom account. Also, no app pools that are using custom accounts will run.
I googled a bit, unsure which error was the one I needed to track. I have tried:
- registering the account on the command line via the aspnet_ tool
- Making sure the user was in the IIS_IUSRS group
- changing the permissions on C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys file(s)
- adding a completely new user and trying to set an app pool to that users account
There was a couple other random things I tried from googling but I don't remember.
This error doesn't make sense to me, and it seems random. I need help figuring out 1) why I can't set an app pool to a custom account and 2) why the identity isn't working for my applications anymore
推荐答案
我找到了一些链接，这些链接让我找到了解决方案。
在c：\windows \ system32 \inetsrv\config \ applicationHost.config我删除了所有的configProtectedData条目。
然后我删除了％ALLUSERSPROFILE％\ Microsoft \ Crypto \ RSA \MachineKeys中的所有内容
我从inetsrv目录运行iissetup.exe / install SharedLibraries，导致失败= 0x80070005
然后我能够设置我的应用程序池，好像什么也没发生。
I found a couple of links that led me to a solution.
In c:\windows\system32\inetsrv\config\applicationHost.config I removed all the configProtectedData entries.
Then I removed everything in %ALLUSERSPROFILE%\Microsoft\Crypto\RSA\MachineKeys
I ran iissetup.exe /install SharedLibraries from the inetsrv directory, which resulted in a "Failed = 0x80070005"
I then was able to set up my application pools as if nothing happened.
这篇关于IIS8键集不存在的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
