Changing Password for HSI Services Loses Cryptographic Key

ID: Q192412

The information in this article applies to:

SYMPTOMS

Changing the password(s) for HSI (Host Security Integration) services causes HSI to function incorrectly.

CAUSE

When Host Security is initially installed, the service user account is given a cryptographic key based on the user ID and password that was chosen during the installation process. This information is then taken and put into the registry and is referenced when the HSI services start.

If the user account or password has changed, it will not match the original cryptographic key information, causing HSI not to work. Reviewing the application log in the Event Viewer will show the following errors coming from source SNA Host Security:

   Event ID 1244
   Unable to import cryptographic key into container Supplied code
   0x8009000d

   Event ID 594
   Host Process - was unable to create connection handle to connect to PMP

   Event ID 629
   Host Process - was unable to create connection handle to connect to UDB

WORKAROUND

Use the original password and/or user ID that the service(s) were initially installed under.

STATUS

Microsoft has confirmed this to be a problem in SNA Server versions 3.0, 3.0SP1, 3.0SP2, 3.0SP3, 4.0, and 4.0SP1.

MORE INFORMATION

HSI is comprised of three services: SNAPMP, SNADATABASE and SNAHOSTPROCESS. All three services must run under the same service account. If the password is changed for one or more of these services (or if a new user account is created for these services to use), HSI will not function properly.

Keywords          :  kbfaq
Version           : WINDOWS:3.0,3.0SP1,3.0SP2,3.0SP3,4.0,4.0SP1
Platform          : WINDOWS
Issue type        : kbbug
Solution Type     : kbpending

Last Reviewed: May 18, 1999