in

UGISS Community

Il sito della community dello User Group Italiano di SQL Server

Attivare SSL su SQL Server 2005 Express

Last post 05-17-2008 13.08 by dmauri. 3 replies.
Page 1 of 1 (4 items)
Sort Posts: Previous Next
  • 05-12-2008 14.24

    Attivare SSL su SQL Server 2005 Express

     Buongiorno a tutti, ho trovato utilissima la vostra guida che riporta in dettaglio l'attivazione di SSL su SQL Server 2005 Express, purtroppo però continuo a ricevere un errore che non mi consente di avviare il server dopo averlo settato per l'utilizzo del certificato creato con makecert.

    Spero che qualcuno mi possa dare qualche suggerimento... intanto allego il log che riporta l'errore:

    2008-05-12 14:06:57.03 Server      Microsoft SQL Server 2005 - 9.00.1399.06 (Intel X86)
        Oct 14 2005 00:33:37
        Copyright (c) 1988-2005 Microsoft Corporation
        Express Edition on Windows NT 5.1 (Build 2600: Service Pack 2)

    2008-05-12 14:06:57.03 Server      (c) 2005 Microsoft Corporation.
    2008-05-12 14:06:57.03 Server      All rights reserved.
    2008-05-12 14:06:57.03 Server      Server process ID is 2468.
    2008-05-12 14:06:57.05 Server      Logging SQL Server messages in file 'c:\Programmi\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG'.
    2008-05-12 14:06:57.05 Server      This instance of SQL Server last reported using a process ID of 1832 at 12/05/2008 14.06.14 (local) 12/05/2008 12.06.14 (UTC). This is an informational message only; no user action is required.
    2008-05-12 14:06:57.05 Server      Registry startup parameters:
    2008-05-12 14:06:57.05 Server           -d c:\Programmi\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\master.mdf
    2008-05-12 14:06:57.05 Server           -e c:\Programmi\Microsoft SQL Server\MSSQL.1\MSSQL\LOG\ERRORLOG
    2008-05-12 14:06:57.05 Server           -l c:\Programmi\Microsoft SQL Server\MSSQL.1\MSSQL\DATA\mastlog.ldf
    2008-05-12 14:06:57.06 Server      SQL Server is starting at normal priority base (=7). This is an informational message only. No user action is required.
    2008-05-12 14:06:57.06 Server      Detected 1 CPUs. This is an informational message; no user action is required.
    2008-05-12 14:06:57.16 Server      Using dynamic lock allocation.  Initial allocation of 2500 Lock blocks and 5000 Lock Owner blocks per node.  This is an informational message only.  No user action is required.
    2008-05-12 14:06:57.20 Server      Database Mirroring Transport is disabled in the endpoint configuration.
    2008-05-12 14:06:57.23 spid5s      Starting up database 'master'.
    2008-05-12 14:06:57.30 spid5s      5 transactions rolled forward in database 'master' (1). This is an informational message only. No user action is required.
    2008-05-12 14:06:57.33 spid5s      0 transactions rolled back in database 'master' (1). This is an informational message only. No user action is required.
    2008-05-12 14:06:57.33 spid5s      Recovery is writing a checkpoint in database 'master' (1). This is an informational message only. No user action is required.
    2008-05-12 14:06:57.41 spid5s      SQL Trace ID 1 was started by login "sa".
    2008-05-12 14:06:57.44 spid5s      Starting up database 'mssqlsystemresource'.
    2008-05-12 14:06:57.94 spid5s      Server name is 'EUGENIO\SQLEXPRESS'. This is an informational message only. No user action is required.
    2008-05-12 14:06:57.94 spid8s      Starting up database 'model'.
    2008-05-12 14:06:57.94 spid5s      Starting up database 'msdb'.
    2008-05-12 14:06:58.20 spid5s      1 transactions rolled forward in database 'msdb' (4). This is an informational message only. No user action is required.
    2008-05-12 14:06:58.20 spid8s      Clearing tempdb database.
    2008-05-12 14:06:58.27 spid5s      0 transactions rolled back in database 'msdb' (4). This is an informational message only. No user action is required.
    2008-05-12 14:06:58.27 spid5s      Recovery is writing a checkpoint in database 'msdb' (4). This is an informational message only. No user action is required.
    2008-05-12 14:06:58.67 spid8s      Starting up database 'tempdb'.
    2008-05-12 14:06:58.84 spid5s      Recovery is complete. This is an informational message only. No user action is required.
    2008-05-12 14:06:58.84 spid11s     The Service Broker protocol transport is disabled or not configured.
    2008-05-12 14:06:58.84 spid11s     The Database Mirroring protocol transport is disabled or not configured.
    2008-05-12 14:06:58.92 spid11s     Service Broker manager has started.
    2008-05-12 14:07:04.58 Server      The server could not load the certificate it needs to initiate an SSL connection. It returned the following error: 0x8009030d. Check certificates to make sure they are valid.
    2008-05-12 14:07:11.22 Server      The server could not load the certificate it needs to initiate an SSL connection. It returned the following error: 0x8009030d. Check certificates to make sure they are valid.
    2008-05-12 14:07:11.28 Server      Errore: 17190, gravità: 16, stato: 1.
    2008-05-12 14:07:11.28 Server      FallBack certificate initialization failed with error code: 1.
    2008-05-12 14:07:11.28 Server      Warning:Encryption is not available, could not find a valid certificate to load.
    2008-05-12 14:07:11.31 Server      Server is listening on [ 'any' <ipv4> 1433].
    2008-05-12 14:07:11.31 Server      Server local connection provider is ready to accept connection on [ \\.\pipe\SQLLocal\SQLEXPRESS ].
    2008-05-12 14:07:11.31 Server      Server named pipe provider is ready to accept connection on [ \\.\pipe\MSSQL$SQLEXPRESS\sql\query ].
    2008-05-12 14:07:11.31 Server      Dedicated administrator connection support was not started because it is not available on this edition of SQL Server. This is an informational message only. No user action is required.
    2008-05-12 14:07:11.41 Server      The SQL Network Interface library could not register the Service Principal Name (SPN) for the SQL Server service. Error: 0xd. Failure to register an SPN may cause integrated authentication to fall back to NTLM instead of Kerberos. This is an informational message. Further action is only required if Kerberos authentication is required by authentication policies.
    2008-05-12 14:07:11.41 Server      SQL Server is now ready for client connections. This is an informational message; no user action is required.

     
    Grazie! 

     

     

     

    • Post Points: 20
  • 05-12-2008 15.10 In reply to

    • dmauri
    • Top 10 Contributor
      Male
    • Joined on 05-14-2007
    • Novate Milanese
    • Posts 1.016
    • Points 13.110

    Re: Attivare SSL su SQL Server 2005 Express

    Se l'account con la quale sta girando SQL Server è "Network Service" allora potresti trovarti di fronte a questo bug:

    http://support.microsoft.com/kb/900495/en-us

    Il mio consiglio è quello di modificare l'account con la quale SQL Server sta girando, creando un account ad-hoc.

    Davide Mauri
    Microsoft MVP - SQL Server, MCP, MCAD, MCDBA, MCT - http://www.davidemauri.it
    Socio Fondatore e Mentor di Solid Quality Learning Italy - http://www.solidq.com
    Presidente di UGISS: User Group Italiano Sql Server - http://www.ugiss.org
    • Post Points: 20
  • 05-12-2008 16.10 In reply to

    Re: Attivare SSL su SQL Server 2005 Express

     Grazie mille! vorrei chiedere solo se mi potete indirizzare verso una guida dalla quale apprendere come modificare gli account di esecuzione di SQL Server..

     
     

    • Post Points: 20
  • 05-17-2008 13.08 In reply to

    • dmauri
    • Top 10 Contributor
      Male
    • Joined on 05-14-2007
    • Novate Milanese
    • Posts 1.016
    • Points 13.110

    Re: Attivare SSL su SQL Server 2005 Express

    I Books Online sono il posto giusto:

    How to: Change the Service Startup Account for SQL Server

    http://msdn.microsoft.com/en-us/library/ms345578.aspx

    ho aggiunto il riferimento all'articolo anche al sito UGISS, cosi in futuro sarà più semplice trovarlo

    Davide Mauri
    Microsoft MVP - SQL Server, MCP, MCAD, MCDBA, MCT - http://www.davidemauri.it
    Socio Fondatore e Mentor di Solid Quality Learning Italy - http://www.solidq.com
    Presidente di UGISS: User Group Italiano Sql Server - http://www.ugiss.org
    Filed under:
    • Post Points: 5
Page 1 of 1 (4 items)
(C) 2007 User Group Italiano di SQL Server