Return
-
Title
ChangeAuditor agent service will not start after install -
Description
The ChangeAuditor agent service will not start after installing the ChangeAuditor agent on a server.
The following is logged in the ChangeAuditor Agent log:
On Windows Server 2012 and later:Level: ERRORThread: 7960Logger: TorzagLib.Common.RSAFile: RSA.cppFunction: TorzagLib::Common::CRsaProvider::InitializeLine: 67Message: Failed to initialize key set: 0x8009000fOn Windows Server 2008 R2:Level: ERRORThread: 4736Logger: CAAD.Agent.CAgentKeySetFile: AgentKeySet.cppFunction: CAgentKeySet::InitializeLine:56Message: Failed to initialize key set: 8007000DOn Windows Server 2003:Level: ERRORThread: 4736Logger: CAAD.Agent.CAgentKeySet -
Cause
The ChangeAuditor agent account (typically "Local System") does not have permission to add a key to the Marchinekeys directoryThe Marchinekeys directory is located in the following folder path:Windows 2003 Server: "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys"Windows 2008 and Windows 2012: "C:\programData\Microsoft\Crypto\RSA\MachineKeys" -
Resolution
Windows 2003 Servers:
- On the server with the failing agent, navigate to "C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys"
- Right-click on the folder and select "Properties"
- Select the "Security" tab.
- Add or Modify "SYSTEM", and give it "Full Control".
- Restart the ChangeAuditor Agent
Windows 2008 R2 and later Servers:
- On the server with the failing agent, navigate to "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys"
- Right-click on the folder and select "Properties".
- Select the "Security" tab.
- Add or Modify "SYSTEM", and give it "Full Control"
- Restart the ChangeAuditor Agent