Author Topic: Can't Start IIS - "Object Already Exists"  (Read 13282 times)

Offline admin

  • Administrator
  • Sr. Member
  • *****
  • Posts: 296
    • View Profile
Can't Start IIS - "Object Already Exists"
« on: April 01, 2008, 12:21:58 PM »
When you attempt to start the www service you get:

"Error 2148073487 object already exists"

No need to reinstall IIS just yet.
Don't ask my how, don't ask me why, but this is how I fixed it:

Go to %system root%\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\

(or %windir%\Profiles\All Users\Application Data\Microsoft\Crypto\RSA\ if it's an upgrade from NT 4.0)

Make sure your admin account has full access to the "MachineKeys" folder (You might need to take ownership first)

Start your www service

Offline admin

  • Administrator
  • Sr. Member
  • *****
  • Posts: 296
    • View Profile
Re: Can't Start IIS - "Object Already Exists"
« Reply #1 on: April 06, 2008, 10:12:33 AM »
Error 800a0001 / Object already exists 

Problem Description
When calling AspEncrypt's OpenContext or OpenContextEx methods, the following error is generated:
Persits.CryptoManager.1 error '800a0001'


The text message given with the error varies according to the version of Windows being used:

Windows NT 4 :
Keyset does not exist

Windows 2000 and XP :
Object already exists

Windows 2003 :
Access is denied
or :
An internal error occurred
or :
The handle is invalid

Solution


In general, a key container is only necessary for operations involving certificate-based encryption with public and private keys. A key container is not necessary for symmetric encryption or hashing operations.

If a key container is necessary, this error occurs due to the lack of permissions on your key containers. Key containers are stored in the system registry on Windows NT and in the file system on Windows 2000 and later.

Windows 2000 and higher:

Change the permissions to the Machinekeys directory and the keys to allow the Everyone account to have full control. To do this, perform the following steps:

In Windows Explorer, right-click on the directory
\Documents and settings\All Users\Application Data\Microsoft\Crypto\RSA\Machinekeys

Note: These are hidden files and you may have to adjust Windows Explorer view settings to see them.

Click the Security tab and grant Everyone Full Control.

If the problem persists, try a different key container name.

Windows NT:

Run regedt32 (not regedit!), open the hive HKEY_LOCAL_MACHINE and highlight the key

HKEY_LOCAL_MACHINE\Software\Microsoft\ Cryptography\MachineKeys\<container name> .

Select Security/Permissions from the menu and grant "Everyone" Full Control over this registry key.

If the problem persists, try a different key container name.


 

« Last Edit: April 06, 2008, 02:54:36 PM by admin »

Offline admin

  • Administrator
  • Sr. Member
  • *****
  • Posts: 296
    • View Profile
Re: Can't Start IIS - "Object Already Exists"
« Reply #2 on: April 06, 2008, 02:57:37 PM »
SYMPTOMS
While attempting to reinstall Internet Information Services (IIS) 5.0 or later, the following error message occurs:


Error writing Encryption data to Web Services Configuration database (metabase). 0x8009000F=Object Already Exists.
CAUSE
This problem has been seen after the installation of PCAnywhere.

RESOLUTION
To resolve the problem, use these steps: 1. Remove IIS (by using Add/Remove Programs in Control Panel).
2. Using Windows Explorer, change to the following directory: • If the Windows installation is an upgrade navigate to:
%windir%\Profiles\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys 
• If the Windows installation is a new installation navigate to:
%system root%\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys
NOTE: Files in this directory are hidden. To view this folder and files, select the Show hidden files and folders option button in Folder Options.

 
 
3. Copy all the files in the MachineKeys directory to another location (to back them up).
4. Delete all the files from the MachineKeys directory except the newest one (and not the backups!).NOTE: If you are unable to delete any of these files, try taking ownership of this directory. To do this, follow these steps:

a.  Right-click the MachineKeys folder.
b.  Click Properties.
c.  Click the Security tab.
d.  Click Advanced.
e.  Click the Owner tab.
f.  Highlight the Administrators group to change the owner.
g.  Select Replace owner on subcontainers and objects.
h.  Click OK.
 
5. Look for the following folder:
%systemroot%\system32\Microsoft\Crypto\RSA\MachineKeys
If this folder exists, repeat steps 3 and 4 on this folder.

 
6. Restart the computer.
7. Install IIS (by using Add/Remove Programs in Control Panel).