Return
-
Title
InTrust connector fails to connect after installing KB4056890 (Windows Server 2016) , KB4056898 (Windows Server 2012 R2) or KB4056899 (Windows 2012) -
Description
After installing KB4056890 (Windows Server 2016) , KB4056898 (Windows Server 2012 R2) or KB4056899 (Windows 2012) where IT Security Search is installed, the InTrust connector fails with the following error:IT Search version 11.3Connection error: Creating an instance of the COM component with CLSID {D4FB615F-0B64-468C-A01F-47117B9751F2} from the IClassFactory failed due to the following error: 80070005 Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)).IT Search version 11.2Critical error: [InTrust] Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED)) -
Cause
Known issue described in the following Microsoft article:
https://support.microsoft.com/en-us/help/4056891/windows-10-update-kb4056891
Known issues in this update
When calling CoInitializeSecurity, the call will fail if passing RPC_C_IMP_LEVEL_NONE under certain conditions.When calling CoInitializeSecurity, the call may fail when passing RPC_C_AUTHN_LEVEL_NONE as the authentication level. The error returned on failure is STATUS_BAD_IMPERSONATION_LEVEL. -
Resolution
Depending on the IT Security Search and InTrust server Operating System version, install the relevant Microsoft update on the respective machines (both on the IT Search server and InTrust servers):
Windows 2016
https://support.microsoft.com/en-us/help/4057142/windows-10-update-kb4057142
Windows 2012 R2
Windows 2012The updates above address the issue originally introduced where calling CoInitializeSecurity with the authentication parameter set to RPC_C_AUTHN_LEVEL_NONE resulted in the error STATUS_BAD_IMPERSONATION_LEVEL.