Submit a ticketCall us

WebinarUpcoming Webinar: How Help Desk and Remote Support Pays for Itself

Learn how help desk software can simplify ticketing management, allow you to track hardware and software assets, and accelerate the speed of IT support and service delivery. Gain insights on how remote support tools allow your IT team to maximize their efficiency and ticket resolution by expediting desktop troubleshooting, ultimately helping keep end-users happy and productive.

Register here.

Home > Success Center > Network Performance Monitor (NPM) > Microsoft patch MS15-121 affecting Orion Web Console and alerting

Microsoft patch MS15-121 affecting Orion Web Console and alerting

Created by Justin Wyllys, last modified by MindTouch on Jun 23, 2016

Views: 1,718 Votes: 2 Revisions: 10

Overview

The following services fail to start after installing Microsoft’s MS15-121 patch:

  • SolarWinds Information Service v3
  • SolarWinds Orion Module Engine

Environment

  • NPM v11.5.2

Cause 

The Windows service- CNG Key Isolation is disabled.

These are the messages that you may see in the Business Layer Host Log (C:\ProgramData\SolarWinds\Logs\Orion\BusinessLayerHost.log) after the patch is installed.

WARN  SolarWinds.Orion.Core.Common.ServiceHelper - Waiting for SWIS v2.0 start. Attempt 4, exception message: "Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'."

 

WARN  SolarWinds.Orion.Core.Common.InformationServiceConnectionProvider - Connection via certificate could not be created.
System.InvalidOperationException: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'.
   

ERROR SolarWinds.BusinessLayerHost.BusinessLayerHostService - Unhandled exception caught by business layer host. System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
   at System.Net.UnsafeNclNativeMethods.SafeNetHandles_SECURITY.AcquireCredentialsHandleW(String principal, String moduleName, Int32 usage, Void* logonID, SecureCredential& authData, Void* keyCallback, Void* keyArgument, SSPIHandle& handlePtr, Int64& timeStamp)


ERROR SolarWinds.Orion.Core.Common.ChannelProxy`1 - Factory failed to create Channel: System.InvalidOperationException: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'."

Resolution

  1. Uninstall Microsoft patch MS15-121.
  2. Set the Windows CNG Key Isolation service to Manual (instead of disabled).
  3. Reinstall Microsoft patch MS15-121.
  4. Restart all Orion services or reboot your machine.

 

Last modified

Tags

Classifications

Public