Server Gated Cryptography (SGC) Update for IIS

Last reviewed: January 28, 1998
Article ID: Q148427

The information in this article applies to:

Microsoft Windows NT Server version 4.0 with Service Pack 3
Microsoft Internet Information Server versions 3.0 and 4.0

SUMMARY

Microsoft has released an updated version of Schannel.dll. The latest version provides the following benefits:

Banks outside the U.S. and Canada can now use extremely strong 128-bit encryption.
Eliminates the need for separate SGC and non-SGC versions of Schannel.dll.

Corrects the "Bad Password" error message documented in the following article in the Microsoft Knowledge Base:

      ARTICLE-ID: Q179550
      TITLE     : Installing a Certificate in IIS May Result in Bad
                  Password Error

Includes an updated version of Sgcinst.exe that corrects the problem where SGCINST appears to execute but SGC does not work. For more information, please see the following article in the Microsoft Knowledge Base:
```
      ARTICLE-ID: Q180018
      TITLE     : SGCINST.EXE Appears to Execute but SGC Does Not Work
```

For more information on the Server Gated Cryptography (SGC) version of Schannel.dll, please go to the following Microsoft web site:

   http://www.microsoft.com/industry/finserv/m_finserv/m_fordev_g.htm

NOTE: Because the Microsoft Web site is constantly updated, the site address may change without notice. If this occurs, link to the Microsoft home page at the following address:

   http://www.microsoft.com/

MORE INFORMATION

The following version of Schannel.dll does not enable SGC and is available as Schannel.exe from Microsoft's ftp site at:

   ftp://ftp.microsoft.com/bussys/winnt/winnt-public/misc/schannel/

or from the Microsoft Software Library:

 ~ Schannel.exe (size: 162464 bytes)

The following version of Schannel.dll enables SGC and is available as Sgcschannel.exe from Microsoft's ftp site at:

   ftp://ftp.microsoft.com/bussys/winnt/winnt-public/misc/sgcschannel/

or from the Microsoft Software Library:

 ~ Sgcschnl.exe (size: 171704 bytes)

After you download the appropriate file to a temporary folder, execute it, and then follow the instructions in the Readme.txt file.

Residents of the US and Canada can download the North American version of these files from:

   http://mssecure.www.conxion.com/cgi-bin/ntitar.pl

For more information about downloading files from the Microsoft Software Library, please see the following article in the Microsoft Knowledge Base:

   ARTICLE-ID: Q119591
   TITLE     : How to Obtain Microsoft Support Files from Online Services

Additional query words: 4.00 sp3 3.00 iis international banking win95 ie
internet explorer 3.02 4.01
Keywords : iissecurity kbfile kbinterop
Version : WinNT:3.0,4.0
Platform : winnt

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: January 28, 1998
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.