Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Network Performance Monitor (NPM) > Microsoft patch MS15-121 affecting Orion Web Console and alerting

Microsoft patch MS15-121 affecting Orion Web Console and alerting

Created by Justin Wyllys, last modified by MindTouch on Jun 23, 2016

Views: 135 Votes: 2 Revisions: 10

Overview

The following services fail to start after installing Microsoft’s MS15-121 patch:

  • SolarWinds Information Service v3
  • SolarWinds Orion Module Engine

Environment

  • NPM v11.5.2

Cause 

The Windows service- CNG Key Isolation is disabled.

These are the messages that you may see in the Business Layer Host Log (C:\ProgramData\SolarWinds\Logs\Orion\BusinessLayerHost.log) after the patch is installed.

WARN  SolarWinds.Orion.Core.Common.ServiceHelper - Waiting for SWIS v2.0 start. Attempt 4, exception message: "Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'."

 

WARN  SolarWinds.Orion.Core.Common.InformationServiceConnectionProvider - Connection via certificate could not be created.
System.InvalidOperationException: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'.
   

ERROR SolarWinds.BusinessLayerHost.BusinessLayerHostService - Unhandled exception caught by business layer host. System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> System.AccessViolationException: Attempted to read or write protected memory. This is often an indication that other memory is corrupt.
   at System.Net.UnsafeNclNativeMethods.SafeNetHandles_SECURITY.AcquireCredentialsHandleW(String principal, String moduleName, Int32 usage, Void* logonID, SecureCredential& authData, Void* keyCallback, Void* keyArgument, SSPIHandle& handlePtr, Int64& timeStamp)


ERROR SolarWinds.Orion.Core.Common.ChannelProxy`1 - Factory failed to create Channel: System.InvalidOperationException: Cannot find the X.509 certificate using the following search criteria: StoreName 'My', StoreLocation 'LocalMachine', FindType 'FindBySubjectName', FindValue 'SolarWinds-Orion'."

Resolution

  1. Uninstall Microsoft patch MS15-121.
  2. Set the Windows CNG Key Isolation service to Manual (instead of disabled).
  3. Reinstall Microsoft patch MS15-121.
  4. Restart all Orion services or reboot your machine.

 

Last modified

Tags

Classifications

Public