KB153763 - Error Installing SSL with Setkey.exe

Article ID: 153763

Article Last Modified on 6/22/2005

Microsoft Internet Information Server 1.0

This article was previously published under Q153763

We strongly recommend that all users upgrade to Microsoft Internet Information Services (IIS) version 6.0 running on Microsoft Windows Server 2003. IIS 6.0 significantly increases Web infrastructure security. For more information about IIS security-related topics, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/IIS.mspx

SYMPTOMS

When you run Setkey.exe, you will get the following error message:

SSL Key Set Utility, version 1.0

Error: The necessary security provider is not installed on this machine.
Run this again on the computer the http information server is installed on.
Failed to set the keys in the registry.

CAUSE

One of the SSL security files, Sslsspi.dll is not in the %systemroot%\system32 directory.
The path in the registry is not set properly. Using Regedt32.exe, check to make sure the path to Sslsspi.dll is:

WARNING: Using Registry Editor incorrectly can cause serious, system- wide problems that may require you to reinstall Windows NT to correct them. Microsoft cannot guarantee that any problems resulting from the use of Registry Editor can be solved. Use this tool at your own risk.
```
   HKEY_LOCAL_MACHINE
    System
     CurrentControlSet
      Control
       SecurityProviders
        SecurityProviders = REG_SZ sslsspi.dll

					
```

RESOLUTION

Make sure the path in the registry is not corrupt and that the Sslsspi.dll file is on the computer.

Keywords: kbenv KB153763