Make sure that *all* web listeners with SSL enabled have valid certificates. 99.444% of the time, someone either revoked or removed a certificate without updating ISA. ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: Bunting, Jeff [mailto:BUNTING@xxxxxxxxxxxx] Sent: Thursday, October 27, 2005 07:26 To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA 2004 firewall won't start anymore http://www.ISAserver.org I must confess, I'm not sure. In hindsight, I wish I'd made notes of exactly what I did when, but I didn't think I did anything worth noting while I was doing it... ;-) I did have a couple of web listeners I deleted that I wasn't using, but I didn't think that should cause this error. I do have a certificate from my domain CA in the cert store and one for the web listener. I could wipe the box and reinstall since I don't have it in production, but I'd like to know what is wrong to better understand how all of this works. I haven't messed with this stuff since Proxy 2.0; things have changed quite a bit. Jeff -----Original Message----- From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] Sent: Thursday, October 27, 2005 10:12 AM To: [ISAserver.org Discussion List] Subject: [isalist] RE: ISA 2004 firewall won't start anymore http://www.ISAserver.org Wow Jeff. That's a good one. How'd you do that? Thomas W Shinder, M.D. Site: www.isaserver.org Blog: http://spaces.msn.com/members/drisa/ Book: http://tinyurl.com/3xqb7 MVP -- ISA Firewalls **Who is John Galt?** > -----Original Message----- > From: Bunting, Jeff [mailto:BUNTING@xxxxxxxxxxxx] > Sent: Thursday, October 27, 2005 9:06 AM > To: [ISAserver.org Discussion List] > Subject: [isalist] ISA 2004 firewall won't start anymore > > http://www.ISAserver.org > > Yesterday I finally got OWA publishing through ISA and immediately > managed to break it somehow. After restarting ths ISA services I got > these errors in the event log > > 14177 > Some certificates cannot be initialized (error code -2146885628). The > Web Proxy filter could not initialize. Check that all certificates > used by the Web Proxy filter are valid. > > 14060 > Cannot load an application filter Web Proxy Filter > ({4CB7513E-220E-4C20-815A-B67BAA295FF4}). FilterInit failed with code > 0x80092004. To attempt to activate this application filter again, stop > and restart the Firewall service. > 14001 > > Firewall Service failed to initialize. Previous event log entries > might help determine the proper action. > > Eventid.net didn't have anything useful, and the only reference I > found at > http://forums.isaserver.org/ultimatebb.cgi?ubb=get_topic;f=19; > t=000394 > had no resolution. I have not done an export or anything. > > How can I tell which certificates are used by the web proxy filter as > the message in 14177 suggests? > > Jeff > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Visit TechGenix.com for more information about our other sites: > http://www.techgenix.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > Report abuse to listadmin@xxxxxxxxxxxxx > > ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: bunting@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: jim@xxxxxxxxxxxx To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist Report abuse to listadmin@xxxxxxxxxxxxx All mail to and from this domain is GFI-scanned.