Submit a ticketCall us

Announcing NCM 7.7
With NCM 7.7, you can examine the rules that make up an access control list for a Cisco ASA device. Then you can apply filters to display only rules that meet the specified criteria, order the rules by line number or by the hit count, and much more.
See new features and improvements.

Home > Success Center > Network Performance Monitor (NPM) > Microsoft patch MS15-121 affecting Orion Web Console and alerting

Microsoft patch MS15-121 affecting Orion Web Console and alerting

Created by Justin Wyllys, last modified by MindTouch on Jun 23, 2016

Views: 100 Votes: 2 Revisions: 10

Overview

The following services fail to start after installing Microsoft’s MS15-121 patch:

  • SolarWinds Information Service v3
  • SolarWinds Orion Module Engine

Environment

  • NPM v11.5.2

Cause 

The Windows service- CNG Key Isolation is disabled.

These are the messages that you may see in the Business Layer Host Log (C:\ProgramData\SolarWinds\Logs\Orion\BusinessLayerHost.log) after the patch is installed.

WARN  SolarWinds.Orion.Core.Common.ServiceHelper - Waiting for SWIS v2.0 start. Attempt 4, exception message: "Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'."

 

WARN  SolarWinds.Orion.Core.Common.InformationServiceConnectionProvider - Connection via certificate could not be created.
System.InvalidOperationException: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'.
   

ERROR SolarWinds.BusinessLayerHost.BusinessLayerHostService - Unhandled exception caught by business layer host. System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
   at System.Net.UnsafeNclNativeMethods.SafeNetHandles_SECURITY.AcquireCredentialsHandleW(String principal, String moduleName, Int32 usage, Void* logonID, SecureCredential& authData, Void* keyCallback, Void* keyArgument, SSPIHandle& handlePtr, Int64& timeStamp)


ERROR SolarWinds.Orion.Core.Common.ChannelProxy`1 - Factory failed to create Channel: System.InvalidOperationException: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'."

Resolution

  1. Uninstall Microsoft patch MS15-121.
  2. Set the Windows CNG Key Isolation service to Manual (instead of disabled).
  3. Reinstall Microsoft patch MS15-121.
  4. Restart all Orion services or reboot your machine.

 

Last modified
22:41, 22 Jun 2016

Tags

Classifications

Public