The token provider was unable to provide a security token

I am configuring workflow for SharePoint 2013. For that I am creating a workflow farm and selected custom settings and selecting certificates from personal store. When I am select the option where it will auto generate the certificate configuration 
successful.
while selecting the certs from personal store, configuration failed to add host to workflow farm and throwing below error
Configuring Workflow Manager runtime settings.
The token provider was unable to provide a security token while accessing 'https://hostname:9355/WorkflowDefaultNamespace/$STS/Windows/'. Token provider returned message: 'The underlying connection was closed: Could not establish trust relationship for the
SSL/TLS secure channel.'.
Thanks,
Neetu
neetu

Hi,
When I am trying to receive the same messages from a Azure service bus subscription using .net (C#) client,
BusSubscriberbusSubscriber =
newBusSubscriber("TestTopic2",
"Endpoint=sb://overcasb.servicebus.windows.net/;SharedSecretIssuer=owner;SharedSecretValue=wqYlT4yHZimeUZacH+1V1hj/ZrKu7zK9ELaaLYDxqjc=",
"AssetMovement",
"AssetMovement");
I am getting the same error here also.
"The token provider was unable to provide a security token while accessing 'https://overcasb-sb.accesscontrol.windows.net/WRAPv0.9/'.
Error Code: 407 Proxy Authentication Required. The ISA Server requires authorization to fulfill the request. Access to the Web Proxy filter is denied. (12209)
By setting  <defaultProxy useDefaultCredentials="true" /> in appconfig, I got rid of the above error. And now its working fine with .net(C#) client.
<configuration>
  <system.net>
    <defaultProxy useDefaultCredentials="true" />
  </system.net>
</configuration>
The same setting I tried in BTSNTSvc.exe config file and ofcourse restarted the host instance but still getting the same error. Any help?
gautam

Similar Messages

  • Errors with SharePoint Security Token Service: "The revocation function was unable to check revocation for the certificate"

    I'm getting these errors in the eventlog and ULS, "An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root
    Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS CERTIFICATE THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate."
    The errors point to the SharePoint Security Token Service as the issue ("The revocation function was unable to check revocation for the certificate") reported back by the Topology service.  This is apparent when executing a search, accessing
    the managed metadata service, issuing SPSite commands in Powershell, or anything that needs to run through the "SharePoint Web Services" site.  I've looked at the certificate assigned to that site and everything appears to be in order. 
    It would seem to me to be either an incorrect endpoint configuration (internally cached perhaps?) or related to security access for the configuration database (in order to validate the certificate root).
    What I’ve tried so far:
    I’ve been all over the certificate settings, both in the server store, and within SharePoint Token Service config.  Both appear to be configured correctly such that the root CAs can be validated.
    Re-entered the passwords for the application pool domain accounts to eliminate these as a potential cause.  I’ve also verified the service accounts reporting the error, do have access to the configuration database.
    Re-provisioned the STS service to see if that might clear out any cached issues and validated everything else according to this
    MS Tech note.
    So far nothing has worked.  Is there anything else I could be looking at that I've missed? (Full eventlog detail below)
    Log Name:      Application
    Source:        Microsoft-SharePoint Products-SharePoint Foundation
    Date:          2/20/2015 11:19:41 AM
    Event ID:      8311
    Task Category: Topology
    Level:         Error
    Keywords:      
    User:          <SP SERVICE ACCOUNT>
    Computer:      <SHAREPOINTSERVER>
    Description:
    An operation failed because the following certificate has validation errors:\n\nSubject Name: CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US\nIssuer Name: CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US\nThumbprint: <STS
    CERT THUMBPRINT>\n\nErrors:\n\n RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-SharePoint Products-SharePoint Foundation" Guid="{6FB7E0CD-52E7-47DD-997A-241563931FC2}" />
        <EventID>8311</EventID>
        <Version>14</Version>
        <Level>2</Level>
        <Task>13</Task>
        <Opcode>0</Opcode>
        <Keywords>0x4000000000000000</Keywords>
        <TimeCreated SystemTime="2015-02-20T17:19:41.213852500Z" />
        <EventRecordID>1611121</EventRecordID>
        <Correlation />
        <Execution ProcessID="10212" ThreadID="10328" />
        <Channel>Application</Channel>
        <Computer><SHAREPOINTSERVER></Computer>
        <Security UserID="<SP SERVICE ACCOUNT>" />
      </System>
      <EventData>
        <Data Name="string0">CN=SharePoint Security Token Service, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string1">CN=SharePoint Root Authority, OU=SharePoint, O=Microsoft, C=US</Data>
        <Data Name="string2"><STS CERT THUMBPRINT></Data>
        <Data Name="string3">RevocationStatusUnknown: The revocation function was unable to check revocation for the certificate.
    </Data>
      </EventData>
    </Event>

    Hi Darren,
    This problem seems to occur when an administrator deletes the local trust relationship of the farm from the Security section of the Central Administration website
    In order to resolve this problem, the local trust relationship has to be created. This can be done by running the following PowerShell commands
    $rootCert = (Get-SPCertificateAuthority).RootCertificate
    New-SPTrustedRootAuthority -Name "localNew" -Certificate $rootCert
    After running the above commands, perform an IISReset on all servers in the farm.
    More information:
    http://support.microsoft.com/kb/2545744
    Best Regards,
    Wendy
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Wendy Li
    TechNet Community Support

  • Subordinate certification authority can't start ADCS service: The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).

    Hi
    I have 1 rootCA and 1 subordinate CA. I removed one of the locations to publish CRL and after that the ADCS service can't start. I get the warning first:
    Revocation status for a certificate in the chain for CA certificate 2 for siu-SRVDC01-CA could not be verified because a server is currently unavailable.  The revocation function was unable to check revocation because the revocation server was offline.
    0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
    And then the error:
    Active Directory Certificate Services did not start: Could not load or verify the current CA certificate.  siu-SRVDC01-CA The revocation function was unable to check revocation because the revocation server was offline. 0x80092013 (-2146885613 CRYPT_E_REVOCATION_OFFLINE).
    I've read many threads with similar problems but I can't find the solution. The CDP is online. I've run "certutil -url cert.cer" to verify the CDP and AIA and everything is fine. But the service is still not starting.
    See this command too:
    C:\>certutil -verify -urlfetch subCADC01.cer
    Issuer:
        CN=siu-SRVDC02-CA
        DC=siu
        DC=domain
      Name Hash(sha1): 152a7c43f186d9179c1c3256d3a1a0af4a9df892
      Name Hash(md5): b409e417a38bbe04b5800512bd94efac
    Subject:
        CN=siu-SRVDC01-CA
        DC=siu
        DC=domain
      Name Hash(sha1): 5ee421b84c3b18ff134cf2e42226853d78d3409b
      Name Hash(md5): e1a454692361733e45dad374dc14cae3
    Cert Serial Number: 1e0000022c707c76c0a27b315700000000022c
    dwFlags = CA_VERIFY_FLAGS_CONSOLE_TRACE (0x20000000)
    dwFlags = CA_VERIFY_FLAGS_DUMP_CHAIN (0x40000000)
    ChainFlags = CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT (0x40000000)
    HCCE_LOCAL_MACHINE
    CERT_CHAIN_POLICY_BASE
    -------- CERT_CHAIN_CONTEXT --------
    ChainContext.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    ChainContext.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
    SimpleChain.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
    SimpleChain.dwRevocationFreshnessTime: 1 Hours, 2 Minutes, 16 Seconds
    CertContext[0][0]: dwInfoStatus=102 dwErrorStatus=0
      Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      NotBefore: 19.03.2015 11:18
      NotAfter: 19.03.2017 11:28
      Subject: CN=siu-SRVDC01-CA, DC=siu, DC=domain
      Serial: 1e0000022c707c76c0a27b315700000000022c
      Template: SubCA
      a1a8a95464c5b586da6e9b304142d59fc5a22ae0
      Element.dwInfoStatus = CERT_TRUST_HAS_KEY_MATCH_ISSUER (0x2)
      Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
      ----------------  Certificate AIA  ----------------
      Verified "Certificate (0)" Time: 0
        [0.0] http://wwwca/CertEnroll/srvdc02.siu.domain_siu-SRVDC02-CA.crt
      ----------------  Certificate CDP  ----------------
      Verified "Base CRL (26)" Time: 0
        [0.0] http://sharepoint.siu.no:8088/siu-SRVDC02-CA.crl
      ----------------  Base CRL CDP  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate OCSP  ----------------
      No URLs "None" Time: 0
        CRL 26:
        Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
        ThisUpdate: 19.03.2015 11:10
        NextUpdate: 15.09.2015 23:30
        e2ee543a68214f9b99dda2e9f58b1ddfc34429d1
    CertContext[0][1]: dwInfoStatus=10c dwErrorStatus=0
      Issuer: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      NotBefore: 23.09.2011 13:00
      NotAfter: 23.09.2021 13:10
      Subject: CN=siu-SRVDC02-CA, DC=siu, DC=domain
      Serial: 60fc459ebdefa5b646a081b0c21c259d
      4ea8bb95b0038c69a83c939e8a54f892cd0b5056
      Element.dwInfoStatus = CERT_TRUST_HAS_NAME_MATCH_ISSUER (0x4)
      Element.dwInfoStatus = CERT_TRUST_IS_SELF_SIGNED (0x8)
      Element.dwInfoStatus = CERT_TRUST_HAS_PREFERRED_ISSUER (0x100)
      ----------------  Certificate AIA  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate CDP  ----------------
      No URLs "None" Time: 0
      ----------------  Certificate OCSP  ----------------
      No URLs "None" Time: 0
    Exclude leaf cert:
      691f7e42f5c4a86d03b7225bf7303369ef6dcc7e
    Full chain:
      17e5b9477a1736c33dc0ff245e7b06de5b958c4c
    Verified Issuance Policies: None
    Verified Application Policies: All
    Cert is a CA certificate
    Leaf certificate revocation check passed
    CertUtil: -verify command completed successfully.
    Any clue?

    It looks like it is trying to get the CRL using LDAP. It is quite strange since no ldap entry is on the subordinate CA,
    only an HTTP address:
              <CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
                <CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint" 
    I have checked that object using adsi Edit and the permissions seem ok. Also there is a value on both attributes: certificateRevocationList and deltaRevocationList.
    This problem happened after I removed the LDAP entry for the "CRL Distribution point" from the sub CA properties. Should I add back the LDAP entry?
    Log Name:      Microsoft-Windows-CAPI2/Operational
    Source:        Microsoft-Windows-CAPI2
    Date:          19.03.2015 14:42:07
    Event ID:      11
    Task Category: Build Chain
    Level:         Error
    Keywords:      Path Discovery,Path Validation
    User:          SYSTEM
    Computer:      srvdc01.siu.domain
    Description:
    For more details for this event, please refer to the "Details" section
    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
      <System>
        <Provider Name="Microsoft-Windows-CAPI2" Guid="{5bbca4a8-b209-48dc-a8c7-b23d3e5216fb}" />
        <EventID>11</EventID>
        <Version>0</Version>
        <Level>2</Level>
        <Task>11</Task>
        <Opcode>2</Opcode>
        <Keywords>0x4000000000000003</Keywords>
        <TimeCreated SystemTime="2015-03-19T13:42:07.481533500Z" />
        <EventRecordID>131</EventRecordID>
        <Correlation />
        <Execution ProcessID="6288" ThreadID="5472" />
        <Channel>Microsoft-Windows-CAPI2/Operational</Channel>
        <Computer>srvdc01.siu.domain</Computer>
        <Security UserID="S-1-5-18" />
      </System>
      <UserData>
        <CertGetCertificateChain>
          <Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
          <ExtendedKeyUsage />
          <Flags value="40000000" CERT_CHAIN_REVOCATION_CHECK_CHAIN_EXCLUDE_ROOT="true" />
          <ChainEngineInfo context="machine" />
          <CertificateChain chainRef="{60B61582-1C3C-4B58-AE8C-70278ADEE402}" revocationFreshnessTime="P2DT21H13M20S">
            <TrustStatus>
              <ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
              <InfoStatus value="100" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
            </TrustStatus>
            <ChainElement>
              <Certificate fileRef="E02AA2C59FD54241309B6EDA86B5C56454A9A8A1.cer" subjectName="siu-SRVDC01-CA" />
              <SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
              <PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
              <TrustStatus>
                <ErrorStatus value="1000040" CERT_TRUST_REVOCATION_STATUS_UNKNOWN="true" CERT_TRUST_IS_OFFLINE_REVOCATION="true" />
                <InfoStatus value="102" CERT_TRUST_HAS_KEY_MATCH_ISSUER="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
              </TrustStatus>
              <ApplicationUsage any="true" />
              <IssuanceUsage />
              <RevocationInfo freshnessTime="P2DT21H13M20S">
                <RevocationResult value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</RevocationResult>
                <StrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
                <DeltaStrongSignProperties signHash="RSA/SHA1" issuerPublicKeyLength="2048" />
                <CertificateRevocationList location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?certificateRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="DEEB557897A9FEA217DF83D95BF24CA54051B1CF.crl" issuerName="siu-SRVDC02-CA" />
                <CertificateRevocationList deltaCRL="true" location="TvoCache" url="ldap:///CN=siu-SRVDC02-CA,CN=srvdc02,CN=CDP,CN=Public%20Key%20Services,CN=Services,CN=Configuration,DC=siu,DC=domain?deltaRevocationList?base?objectClass=cRLDistributionPoint"
    fileRef="58A2CDBC7A238DDD76EEFEDE354A04596F5AED71.crl" issuerName="siu-SRVDC02-CA" />
              </RevocationInfo>
            </ChainElement>
            <ChainElement>
              <Certificate fileRef="56500BCD92F8548A9E933CA8698C03B095BBA84E.cer" subjectName="siu-SRVDC02-CA" />
              <SignatureAlgorithm oid="1.2.840.113549.1.1.5" hashName="SHA1" publicKeyName="RSA" />
              <PublicKeyAlgorithm oid="1.2.840.113549.1.1.1" publicKeyName="RSA" publicKeyLength="2048" />
              <TrustStatus>
                <ErrorStatus value="0" />
                <InfoStatus value="10C" CERT_TRUST_HAS_NAME_MATCH_ISSUER="true" CERT_TRUST_IS_SELF_SIGNED="true" CERT_TRUST_HAS_PREFERRED_ISSUER="true" />
              </TrustStatus>
              <ApplicationUsage any="true" />
              <IssuanceUsage any="true" />
            </ChainElement>
          </CertificateChain>
          <EventAuxInfo ProcessName="certsrv.exe" />
          <CorrelationAuxInfo TaskId="{54E4FCD3-E70A-4024-BB81-6A053EAACE21}" SeqNumber="9" />
          <Result value="80092013">The revocation function was unable to check revocation because the revocation server was offline.</Result>
        </CertGetCertificateChain>
      </UserData>
    </Event>

  • HT4864 I am getting a triangle with an exclamation point next to my inbox...it says: There may be a problem with the mail server or network. Verify the settings for account "MobileMe" or try again.  The server returned the error: Mail was unable to log in

    I can send but cannot recieve email
    This is the messege I am gewtting:
    There may be a problem with the mail server or network. Verify the settings for account “MobileMe” or try again.
    The server returned the error: Mail was unable to log in to the IMAP server “p02-imap.mail.me.com” using “Password” authentication. Verify that your account settings are correct.
    The server returned the error: Service temporarily unavailable

    Also if I go to system preferences accounts and re-enter the password it fixes the glitch sometimes.

  • The search request was unable to connect to the Search Service

    I have upgraded from WSS 3.0 to SharePoint Foundation 2010. So far everything appears to be OK apart from my search.
    When I attempt a search I get the following:
    The search request was unable to connect to the Search Service.
    I checked the Manage Database Update Status in Central Admin and noticed the following(an upgrade is required):
    Also, I checked Manage Services on Server and noticed that the only search related service is 'SharePoint Foundation Help Search'.
    If I go into Manage Service Applications and click new there is no option to add a search service.
    Finally I tried PSConfig:
    PS C:\Users\administrator.ACHESON> PSConfig.exe -cmd upgrade -inplace b2b -force
    -cmd applicationcontent -install -cmd installfeatures
    SharePoint Products Configuration Wizard version 14.0.6009.1000. Copyright (C) M
    icrosoft Corporation 2010. All rights reserved.
    Performing configuration task 1 of 6
    Initializing SharePoint Products upgrade...
    Waiting to get a lock to upgrade the farm.
    Successfully initialized SharePoint Products upgrade.
    Performing configuration task 2 of 6
    Initiating the upgrade sequence...
    Successfully initiated the upgrade sequence.
    Performing configuration task 3 of 6
    Registering SharePoint features...
    Feature installation has determined that there are no new features that require
    installation.
    Successfully registered SharePoint features.
    Performing configuration task 4 of 6
    Installing the application content files...
    Installing the SharePoint Central Administration Web Application content files..
    Installing the SharePoint Web Application content files...
    Successfully installed the application content files.
    Performing configuration task 5 of 6
    Upgrading SharePoint Products...
    10.00%Failed to upgrade SharePoint Products.
    An exception of type Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfig
    urationTaskException was thrown. Additional exception information: The upgrade
    command is invalid or a failure has been encountered.
    Failed to upgrade SharePoint Products.
    Total number of configuration settings run: 5
    Total number of successful configuration settings: 4
    Total number of unsuccessful configuration settings: 1
    Successfully stopped the configuration of SharePoint Products.
    Configuration of SharePoint Products failed. Configuration must be performed be
    fore you use SharePoint Products. For further details, see the diagnostic log l
    ocated at C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\1
    4\LOGS\PSCDiagnostics_10_9_2013_12_47_54_528_1859316720.log and the application
    event log.
    This is the warnings and errors that the log contained:
    10/09/2013 12:48:16 10 WRN Found registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Shared Tools\Web Server Extensions\14.0\WSS\ComponentsToRegister, but the SubKeyCount is zero
    10/09/2013 12:48:24 10 WRN Failed to add the service connection point for this farm
    10/09/2013 12:48:24 10 WRN Unable to create a Service Connection Point in the current Active Directory domain. Verify that the SharePoint container exists in the current domain and that you have rights to write to it.
    Microsoft.SharePoint.SPException: The object LDAP://CN=Microsoft SharePoint Products,CN=System,DC=acheson-glover,DC=com doesn't exist in the directory.
    at Microsoft.SharePoint.Administration.SPServiceConnectionPoint.Ensure(String serviceBindingInformation)
    at Microsoft.SharePoint.PostSetupConfiguration.UpgradeTask.Run()
    10/09/2013 12:48:40 10 ERR The exclusive inplace upgrader timer job failed.
    10/09/2013 12:48:40 10 ERR Task upgrade has failed with a PostSetupConfigurationTaskException An exception of type Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException was thrown. Additional exception information: The upgrade command is invalid or a failure has been encountered.
    Failed to upgrade SharePoint Products.
    10/09/2013 12:48:40 10 ERR An exception of type Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException was thrown. Additional exception information: The upgrade command is invalid or a failure has been encountered.
    Failed to upgrade SharePoint Products.
    Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException: Exception of type 'Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException' was thrown.
    at Microsoft.SharePoint.PostSetupConfiguration.UpgradeTask.Run()
    at Microsoft.SharePoint.PostSetupConfiguration.TaskThread.ExecuteTask()
    10/09/2013 12:48:40 10 ERR Task upgrade has failed
    10/09/2013 12:48:40 1 ERR Task upgrade SharePoint Products failed, so stopping execution of the engine
    10/09/2013 12:48:40 1 ERR Failed to upgrade SharePoint Products.
    An exception of type Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException was thrown. Additional exception information: The upgrade command is invalid or a failure has been encountered.
    Failed to upgrade SharePoint Products.
    Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException: Exception of type 'Microsoft.SharePoint.PostSetupConfiguration.PostSetupConfigurationTaskException' was thrown.
    at Microsoft.SharePoint.PostSetupConfiguration.UpgradeTask.Run()
    at Microsoft.SharePoint.PostSetupConfiguration.TaskThread.ExecuteTask()
    10/09/2013 12:48:41 1 ERR One or more configuration tasks has failed or some tasks were not run
    10/09/2013 12:48:41 1 ERR One or more configuration tasks has failed to execute
    10/09/2013 12:48:41 1 ERR Configuration of SharePoint Products failed. Configuration must be performed in order for this product to operate properly. To diagnose the problem, review the extended error information located at C:\Program Files\Common Files\Microsoft Shared\Web Server Extensions\14\LOGS\PSCDiagnostics_10_9_2013_12_47_54_528_1859316720.log, fix the problem, and run this configuration wizard again.
    10/09/2013 12:48:41 1 ERR Post setup configuration was not run successfully when using the command line task driver module
    How do I resolve this?
    Cheers
    Paul

    Hi,
    SharePoint Foundation the search service should be installed by default.  It's not the same as with 2010 Standard or Enterprise where you can create a "Service Application" for it.
    Follow this article to configure SharePoint Foundation Search:
    http://plexhosted.blogspot.com/2011/11/how-to-configure-sharepoint-foundation.html
    Meanwhile, here is a thread which discusses the similar question:
    Configuration of SharePoint Foundation 2010 Search
    http://social.technet.microsoft.com/Forums/sharepoint/en-US/af57728f-ae20-477b-8c67-2b594a1a72de/configuration-of-sharepoint-foundation-2010-search?forum=sharepointadminprevious
    Thanks.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

  • INSTALLED ITUNES AND THE ERROR-MAPI WAS UNABLE TO LOAD THE INFORMATION SERVICE APLZOD-OCCURS. WHAT DO I DO.

    INSTALLED ITUNES AND THE ERROR-MAPI WAS UNABLE TO LOAD THE INFORMATION SERVICE APLZOD-OCCURS. WHAT DO I DO.

    Is this on a Windows XP, Vista or 7 system?

  • Unable to open windows using boot camp.  Get message "The bless tool was unable to set the current boot disk."  Any thoughts, Thank you.

    Unable to open windows using boot camp.  Get message "The bless tool was unable to set the current boot disk."   I am using an Imac , Lion operating system, and Windows 7.  It worked a few days ago.  Any thoughts, Thank you.

    Note that nowhere in the Boot Camp instructions does it tell you to use Disk Utility to format the Windows partition. The Boot Camp Assistant program creates the partition & sets the +partition scheme info+ of the disk as appropriate for the Windows installer but the Windows installer itself is responsible for formatting the new partition with the appropriate +file system scheme+ (NTFS for Windows 7).
    If you follow the instructions in the Boot Camp Installation & Setup Guide to the letter you should have no problems installing Windows.

  • Certificate issues Active Directory Certificate Services could not process request 3699 due to an error: The revocation function was unable to check revocation because the revocation server was offline. 0x80092013

    Hi,
    We have some problems with our Root CA. I can se a lot of failed requests. with the event id 22: in the logs. The description is: Active Directory Certificate Services could not process request 3686 due to an error: The revocation function was unable to
    check revocation because the revocation server was offline. 0x80092013 (-2146885613).  The request was for CN=xxxxx.ourdomain.com.  Additional information: Error Verifying Request Signature or Signing Certificate
    A couple of months ago we decomissioned one of our old 2003 DCs and it looks like this server might have had something to do with the CA structure but I am not sure whether this was in use or not since I could find the role but I wasn't able to see any existing
    configuration.
    Let's say that this server was previously responsible for the certificates and was the server that should have revoked the old certs, what can I do know to try and correct the problem?
    Thank you for your help
    //Cris

    hello,
    let me recap first:
    you see these errors on a ROOT CA. so it seems like the ROOT CA is also operating as an ISSUING CA. Some clients try to issue a new certificate from the ROOT CA and this fails with your error mentioned.
    do you say that you had a PREVIOUS CA which you decomissioned, and you now have a brand NEW CA, that was built as a clean install? When you decommissioned the PREVIOUS CA, that was your design decision to don't bother with the current certificates that it
    issued and which are still valid, right?
    The error says, that the REQUEST signature cannot be validated. REQUESTs are signed either by itself (self-signed) or if they are renewal requests, they would be signed with the previous certificate which the client tries to renew. The self-signed REQUESTs
    do not contain CRL paths at all.
    So this implies to me as these requests that are failing are renewal requests. Renewal requests would contain CRL paths of the previous certificates that are nearing their expiration.
    As there are many such REQUEST and failures, it probably means that the clients use AUTOENROLLMENT, which tries to renew their current, but shortly expiring, certificates during (by default) their last 6 weeks of lifetime.
    As you decommissioned your PREVIOUS CA, it does not issue CRL anymore and the current certificates cannot be checked for validity.
    Thus, if the renewal tries to renew them by using the NEW CA, your NEW CA cannot validate CRL of the PREVIOUS CA and will not issue new certificates.
    But it would not issue new certificates anyway even if it was able to verify the PREVIOUS CA's CRL, as it seems your NEW CA is completely brand new, without being restored from the PREVIOUS CA's database. Right?
    So simply don't bother :-) As long as it was your design to decommission the PREVIOUS CA without bothering with its already issued certificates.
    The current certificates which autoenrollment tries to renew cannot be checked for validity. They will also slowly expire over the next 6 weeks or so. After that, autoenrollment will ask your NEW CA to issue a brand new certificate without trying to renew.
    Just a clean self-signed REQUEST.
    That will succeed.
    You can also verify this by trying to issue a certificate on an affected machine manually from Certificates MMC.
    ondrej.

  • I bought a team license for two computers, the purchase was recorded on the credit card and the amount recorded in the making, but was unable to validate the association staff . I received an email stating that Adobe could not release the payment and that

    I bought a team license for two computers, the purchase was recorded on the credit card and the amount recorded in the making, but was unable to validate the association staff .
    I received an email stating that Adobe could not release the payment and that I should validate the method of payment , tried to insert another card number but the system does not accept the security VAT reporting error message. How do I validate my license with association staff and confirm the payment card?

    Hi Daniel,
    For any sort of payment related matter, kindly contact our support team via:  http://helpx.adobe.com/in/contact.html?step=CCSN_adobe-id-signing-in_stillNeedHelp
    If you are unable to use chat option kindly try below mentioned steps.
    Try different browser.
    Delete cookies and cache
    If you are still not able to chat, Kindly reply with the below mentioned information.
    OS version:
    Browser Version:
    You can also try: http://helpx.adobe.com/x-productkb/global/phone-support-orders.html 
    Thanks,
    Atul Saini

  • BEA-149505  -The administration server was unable to establish JMX Connect.

    hello
    Getting the following error, trying to access the weblogic admin server ( Linux x86-64 RHL50) after a fresh install.
    BEA-149505 The administration server was unable to establish JMX Connectivity with the managedServer at the JMX Service URL of <none > URL in the AdminServer LogiI
    1. what steps and configuration files do I need to access to add the url
    I will like to add that the node manager and the cluster screen were NOT configured during the configuration, since this is NOT an OIM configuration
    2. if you have any tips please let me know
    r.

    faisal
    thank for your feedback. I added this in my startup script, but I was NOT able to get the web access to work and when I shot it down, there was an error.
    Here is the startup script, Please show me when to place the scripts
    #!/bin/sh
    # WARNING: This file is created by the Configuration Wizard.
    # Any changes to this script may be lost when adding extensions to this configuration.
    # --- Start Functions ---
    stopAll()
    # We separate the stop commands into a function so we are able to use the trap command in Unix (calling a function) to stop these services
    if [ "X${ALREADY_STOPPED}" != "X" ] ; then
    exit
    fi
    # STOP DERBY (only if we started it)
    if [ "${DERBY_FLAG}" = "true" ] ; then
    echo "Stopping Derby server..."
    ${WL_HOME}/common/derby/bin/stopNetworkServer.sh >"${DOMAIN_HOME}/derbyShutdown.log" 2>&1
    echo "Derby server stopped."
    fi
    ALREADY_STOPPED="true"
    # --- End Functions ---
    # This script is used to start WebLogic Server for this domain.
    # To create your own start script for your domain, you can initialize the
    # environment by calling @USERDOMAINHOME/setDomainEnv.
    # setDomainEnv initializes or calls commEnv to initialize the following variables:
    # BEA_HOME - The BEA home directory of your WebLogic installation.
    # JAVA_HOME - Location of the version of Java used to start WebLogic
    # Server.
    # JAVA_VENDOR - Vendor of the JVM (i.e. BEA, HP, IBM, Sun, etc.)
    # PATH - JDK and WebLogic directories are added to system path.
    # WEBLOGIC_CLASSPATH
    # - Classpath needed to start WebLogic Server.
    # PATCH_CLASSPATH - Classpath used for patches
    # PATCH_LIBPATH - Library path used for patches
    # PATCH_PATH - Path used for patches
    # WEBLOGIC_EXTENSION_DIRS - Extension dirs for WebLogic classpath patch
    "/erasdevapp/weblogic/user_projects/domains/base_domain/bin/startWebLogic
    umask 037
    # Call setDomainEnv here.
    DOMAIN_HOME="/erasdevapp/weblogic/user_projects/domains/base_domain"
    . ${DOMAIN_HOME}/bin/setDomainEnv.sh $*
    SAVE_JAVA_OPTIONS="${JAVA_OPTIONS}"
    SAVE_CLASSPATH="${CLASSPATH}"
    # Start Derby
    DERBY_DEBUG_LEVEL="0"
    if [ "${DERBY_FLAG}" = "true" ] ; then
    ${WL_HOME}/common/derby/bin/startNetworkServer.sh >"${DOMAIN_HOME}/derby.log" 2>&1
    fi
    JAVA_OPTIONS="${SAVE_JAVA_OPTIONS}"
    SAVE_JAVA_OPTIONS=""
    CLASSPATH="${SAVE_CLASSPATH}"
    SAVE_CLASSPATH=""
    trap 'stopAll' 1 2 3 15
    if [ "${PRODUCTION_MODE}" = "true" ] ; then
    WLS_DISPLAY_MODE="Production"
    WLS_DISPLAY_MODE="Production"
    else
    WLS_DISPLAY_MODE="Development"
    fi
    if [ "${WLS_USER}" != "" ] ; then
    JAVA_OPTIONS="${JAVA_OPTIONS} -Dweblogic.management.username=${WLS_USER}"
    fi
    if [ "${WLS_PW}" != "" ] ; then
    JAVA_OPTIONS="${JAVA_OPTIONS} -Dweblogic.management.password=${WLS_PW}"
    fi
    if [ "${MEDREC_WEBLOGIC_CLASSPATH}" != "" ] ; then
    if [ "${CLASSPATH}" != "" ] ; then
    CLASSPATH="${CLASSPATH}${CLASSPATHSEP}${MEDREC_WEBLOGIC_CLASSPATH}"
    else
    CLASSPATH="${MEDREC_WEBLOGIC_CLASSPATH}"
    fi
    fi
    echo "."
    echo "."
    echo "JAVA Memory arguments: ${MEM_ARGS}"
    echo "."
    echo "WLS Start Mode=${WLS_DISPLAY_MODE}"
    echo "."
    echo "CLASSPATH=${CLASSPATH}"
    echo "."
    echo "PATH=${PATH}"
    echo "."
    echo "***************************************************"
    echo "* To start WebLogic Server, use a username and *"
    echo "* password assigned to an admin-level user. For *"
    echo "* server administration, use the WebLogic Server *"
    echo "* console at http://hostname:port/console *"
    echo "***************************************************"
    # CLASS CACHING
    if [ "${CLASS_CACHE}" = "true" ] ; then
    echo "Class caching enabled..."
    JAVA_OPTIONS="${JAVA_OPTIONS} -Dlaunch.main.class=${SERVER_CLASS} -Dlaunch.class.path="${CLASSPATH}" -Dlaunch.complete=weblogic.store.internal.LockManagerImpl -cp ${WL_HOME}/server/lib/pcl2.jar"
    export JAVA_OPTIONS
    SERVER_CLASS="com.oracle.classloader.launch.Launcher"
    fi
    # START WEBLOGIC
    echo "starting weblogic with Java version:"
    ${JAVA_HOME}/bin/java ${JAVA_VM} -version
    if [ "${WLS_REDIRECT_LOG}" = "" ] ; then
    echo "Starting WLS with line:"
    echo "${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} -Dweblogic.Name=${SERVER_NAME} -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} ${PROXY_SETTINGS} ${SERVER_CLASS}"
    ${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} -Dweblogic.Name=${SERVER_NAME} -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} ${PROXY_SETTINGS} ${SERVER_CLASS}
    else
    echo "Redirecting output from WLS window to ${WLS_REDIRECT_LOG}"
    ${JAVA_HOME}/bin/java ${JAVA_VM} ${MEM_ARGS} -Dweblogic.Name=${SERVER_NAME} -Djava.security.policy=${WL_HOME}/server/lib/weblogic.policy ${JAVA_OPTIONS} ${PROXY_SETTINGS} ${SERVER_CLASS} >"${WLS_REDIRECT_LOG}" 2>&1
    fi
    stopAll
    popd
    # Exit this script only if we have been told to exit.
    if [ "${doExitFlag}" = "true" ] ; then
    exit
    fi

  • I tried updating my ipad over a wireless, after downloading the update i was unable to install with a message an error occurred installing ios 7.0.3

    i tried updating my ipad over a wireless, after downloading the update i was unable to install with a message an error occurred installing ios 7.0.3

    Hello mom_5_01,
    The following article should be quite beneficial in your endeavor to update your iPad.
    iPad: Unable to update or restore
    http://support.apple.com/kb/HT4097
    You may encounter the following symptoms while updating or restoring your iPad:
    iPad continually restarts but never displays the Home screen.
    An update or restore did not complete and the iPad is no longer recognized in iTunes.
    iPad stops responding, showing the Apple logo with no progress bar or a stopped progress bar, for over ten minutes.
    If this occurs, you can place iPad into recovery mode and attempt to restore again. If iTunes displayed an alert with an error code, see this article before attempting the steps outlined here.
    Cheers,
    Allen

  • Security processor was unable to find a security header in the message. This might be because the message is an unsecured fault or because there is a binding mismatch between the communicating parties.

    We have a web role where we have hosted a WCF service.
    We are facing the below exception intermittently on consuming the service.
    Security processor was unable to find a security header in the message. This might be because the message is an unsecured fault or because there is a binding mismatch between the communicating parties.   This
    can occur if the service is configured for security and the client is not using security.
    This is intermittent. Few calls fail , and the subsequent calls succeed without making any changes.
    Please help in overcoming this abnormal behavior.
    Thanks in advance !!
    Best Regards ,
    Eswar

    Hi Eswar,
    As the error message mentioned, it may be a mismatch between the configuration on the client and the server.Try putting all your configuration in a binding configuration and then use the same binding configuration on the server and client. Since this issue
    is more related with WCF, I suggest you move to WCF forum, it is appropriate and more experts will assist you.
    Best Regards,
    Jambor
    We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
    Click
    HERE to participate the survey.

  • I have a merge publication , it says : The merge process was unable to access row metadata at the 'Subscriber'

    The merge process was unable to access row metadata at the 'Subscriber'. When troubleshooting, restart the synchronization with verbose history logging and specify an output file to write to, or use SQL Profiler to determine the source of the failure. 
    (Source: MSSQL_REPL, Error number: MSSQL_REPL-2147200996)
    Get help: http://help/MSSQL_REPL-2147200996
    Could not find stored procedure ''. (Source: MSSQLServer, Error number: 2812)
    Get help: http://help/2812
    Failed to get metadata for a batch of rows. (Source: MSSQLServer, Error number: 20680)
    Get help: http://help/20680
    The process was successfully stopped. (Source: MSSQL_REPL, Error number: MSSQL_REPL-2147199481)
    what can I do ?

    Hi,
    Are you facing the same problem when starting with a new subscriber database?
    From the error message suggested that replication metadata may be corrupt. I suggest you drop and re-create the subscription.
    Then click on synchronization status and run the snapshot agent. It hard to tell the cause unless we check Merge Agent error log.
    Regarding the Unreadable Characters,
    change system locale to Chinese if current system locale is English and test the issue. A computer restart is required to make the change effective.
    Thanks.
    Tracy Cai
    TechNet Community Support

  • I recently downloaded a movie that included iTunes extras, however when I went to watch the movie I was unable to because of these extras. Help?

    I recently downloaded a movie that included iTunes extras, however when I went to watch the movie I was unable to because of these extras. Help?

    Select the content which is causing a problem and use the 'Report a problem' button in Your Purchase History on your computer.

  • I rented a movie and went back to menu, when i wanted to watch the movie i was unable to find ¨downloads´in setings

    i rented a movie and went back to menu, when i wanted to watch the movie i was unable to find ¨downloads´in setings

    Hi
    I had the same problem after the last update. Go to settings-iTunes store, sign out and then sign back in and you should see the rentals

  • HT5312 i was unable to reset my security questions, and i do not have a rescue email   Please i need to reset them to be able to use my apple id again normally

    i was unable to reset my security questions, and i do not have a rescue email   Please i need to reset them to be able to use my apple id again normally

    halaalsalhi wrote:
    i was unable to reset my security questions, and i do not have a rescue email 
    See Here > Apple ID: Contacting Apple for help with Apple ID account security
              Ask to speak with the Account Security Team...
    Or Email Here  >  Apple  Support  iTunes Store  Contact

Maybe you are looking for

  • Why do i need to buy the same app for each device over and over again??

    why do i need to buy the same app for each device over and over again?? and why cant i just pay for the app ones for all devices as long at it is with the same account?? i hate that i have to oay for the same game or app three time one for ipad ones

  • Field in the dropdown in PCR.

    Hi, We have custom infotype 9500 and bonus types are maintained in custom infotype. there are 6 entries in the bonus types dropdown and one field in the dropdown xxxxx we are not using from 2008. We dont want that field to fetch to the portal in the

  • Database Search Problem

    Hey, I am creating a database with a user profile, where a user can select their interests. i.e Golfing Yes/No Movies Yes/No Travelling Yes/No So, there are 20 interests like that, and each of them is a boolean. Would it be inefficient to create 20 b

  • Requested registry access is not allowed when opening Infopath Forms on Sharepoint 2013

    Hello Technet Community. I hope this will help anybody out there that experienced this problem after patching Sharepoint 2013. I have a distributed 3-tier Sharepoint 2013 environment. All of a sudden, after the last round of patched released on 7-Jul

  • FOR UPDATE causing query to take very long to execute.. What can we do ??

    SELECT cell_data FROM csv_workfile WHERE cell_row = p_r AND cell_column = p_c FOR UPDATE; this is our query. it take very long to execute. wat can we do to get it working properly. this is real real urgent . Ragards