Microsoft Knowledge Base Article
This article contents is Microsoft Copyrighted material.
©2005-©2007 Microsoft Corporation. All rights reserved.
Terms
of Use |
Trademarks
Article ID: 821114 - Last Review: July 15, 2003 - Revision: 1.3
PRB: Cannot Access the Administration Site on Cluster Members After Cluster Creation
SYMPTOMS
After you create a cluster, you cannot access the Administration site on cluster members by using a Secure Sockets Layer (SSL) connection.
CAUSE
By default, the
Administration Web site is installed on the Web edition of Windows Server 2003, and the site requires SSL (HTTPS) to connect. To
support this scenario, a local certificate that has no root Certification Authority is
generated and bound to the Administration Web site. By default, Application
Center 2000 replicates all certificates that are bound to Web sites and the
corresponding metabase properties when a cluster is added. Because of this, the copy of the Administration Web site on the newly added member points to
the controller's certificate in the member's local certificate store. Because the
name in the controller's certificate is the controller computer name, SSL
connections to this site are unsuccessful.
RESOLUTION
To resolve this problem, do either of the following:
- Before you create a cluster, remove the certificate binding for the Administration
site, and then bind a "cluster" certificate (that is, a certificate that has the same subject as the
host name that clients use) to the site.
- Disable the SSL requirement for accessing
this site and require clients to use the TCP port that the ServerBindings
property specifies. By default, this is 8099.
MORE INFORMATION
Because you cannot upgrade from any version of Microsoft Windows 2000 to Windows
Server 2003 Web Edition, this only applies to new installations.
APPLIES TO
- Microsoft Application Center 2000 Service Pack 2
- Microsoft Windows Server 2003, Web Edition
Community Feedback System
Very often, it takes hours to solve a problem. Very often, you've looked high
and low, and have tried a lot of solutions. When you finally found it, chances
are, it was because someone else helped you. Here's your chance to give back.
Use our community feedback tool to let others know what worked for you and what
didn't.
Please also understand that the community feedback system is not warranted to be
correct, it's simply a system that we've built to let people try and help each
other. If something in a feedback response doesn't make sense to you, or you're
not comfortable making changes that the feedback talks about (like registry
edits), please consult a professional.
Thank you for using kbAlertz.com Feedback System.
-- Scott Cate
Be the first to leave feedback, to help others about this knowledge base
article.
(Optional) Name
(Optional)
Public URL Or Email
Comments
No
HTML -- Text Only Please