A. The following error is logged in the Storage Platform Console for the StorageServer:
Error: Could not save new SSL certificate. System.Security.Cryptography.CryptographicException: Cannot find the requested object.
B. The StorageServer fails to start and the following error is logged:
Error: Unable to start server: Cannot find the requested object. System.Security.Cryptography.CryptographicException: Cannot find the requested object.
- For Symptom A, the StorageServer receives a corrupted certificate from the AccountServer.
- For Symptom B, if the StorageServer has been stopped after the corrupted certificate was received, the service fails to start.
- This article relates to Article 790 where the security update prevents backups from completing successfully.
- To determine which Microsoft KB has been installed on your machine refer to this Microsoft article.
- .NET versions 4.5.0 and 4.5.1 are not affected by this security update.
Solution 1 - If the StorageServer is still running
The solution entails that the Microsoft security update is disabled for the Backup Pro AccountServer service only but allows the Microsoft security update to apply to the server's .NET installation:
- Upgrade your .NET (only if .NET 4.5.2 is currently installed).
- The .NET version is logged when the AccountServer starts up e.g. "16:33:37 Info: .Net version 4.6.1 (394271)"
- If .NET 4.5.2 is not upgraded to a later version, the Storage Platform upgrade will not be able resolve the above symptoms. Instead, you could disable Microsoft's security update. See below.
- Install the latest Backup Pro Storage Platform update on your AccountServer:
Your current version Upgrade to .NET compatibility V7 V7.16.5 (click here for release notes)
4.6 (Windows 2008 only, not 2003)
V8 R5 (32-bit) No upgrade available. See the temporary fix below. n/a
V8 R5 (64-bit)
Note: Requires at least .NET 4.5 and Windows 2008 R2
4.6 or newer
v16.5 (click here for release notes)
4.6 or newer
- Once the update has been installed on the AccountServer, ensure that the update is sent to StorageServers:
- In the Storage Platform Console, from the menu, click Help -> Manage Updates.
- In the Storage Platform Version Report that appears, select and update the relevant StorageServers.
- Ensure that StorageServers start successfully.
Solution 2 - If the StorageServer is stopped
1. Undo Redstor's temporary registry update, if previously applied (see below)
2. Delete the corrupted certificate:
- Browse to the SS_Service folder on your StorageServer - typically in "C:\ProgramData\Attix5 Pro\SS_Service".
- Delete the .p12 file
- Start the StorageServer service
Note: This is to allow the automatic upgrade to be received from the AccountServer.
3. Install the Backup Pro upgrade on the AccountServer. (See "Solution 1" above)
- Download the RedstorManualOptOutSchSendAuxRecord40.zip file and install it on the AccountServer.
- Restart the AccountServer.
Previously, we advised updating relevant registry keys in order to disable the MS16-065 security update (see Article 790). To re-enable the registry keys:
- Download the RedstorManualOptInSchSendAuxRecord40.zip file
- Install the .reg file contained therein on the AccountServer. Also install it on any StorageServers that had received the temporary fix.
- Restart the AccountServer and StorageServers.