sql-server-2005 - 将 SQL Server 2005 的 SSL 设置为 LocalSystem

Question

由于某些限制，我们必须将服务作为 LocalSystem 运行。我已经生成证书并将它们放在以下商店中:

证书(本地计算机)证书 - 服务(SQL Server (MSSQLSERVER))证书 - 服务(SQL Server (MSSQLSERVER))证书 - 当前用户

我是域管理员。每次我转到 SQL Server 配置管理器 -> SQL Server 2005 网络配置 -> MSSQLServer 协议(protocol)，右键单击 -> 属性 -> 证书，下拉列表中没有列出任何证书!

根据 this ，我做的一切都是对的。我也尝试以本地管理员身份运行，没有骰子。

unless the service is running as LocalSystem, NetworkService, or LocalService, in which case you may use an administrative account.

有什么想法吗？

Answer 1

验证您的证书是否满足以下 KB Article 中列出的要求:

After you successfully install the certificate, the certificate does not appear in the Certificate list on the Certificate tab.

Note The Certificate tab is in the Protocols for Properties dialog box that is opened from SQL Server Configuration Manager.

This issue occurs because you may have installed an invalid certificate. If the certificate is invalid, it will not be listed on the Certificate tab. To determine whether the certificate that you installed is valid, follow these steps: Open the Certificates snap-in. To do this, see step 1 in the "How to Configure the MMC Snap-in" section. In the Certificates snap-in, expand Personal, and then expand Certificates. In the right pane, locate the certificate that you installed. Determine whether the certificate meets the following requirements: In the right pane, the value in the Intended Purpose column for this certificate must be Server Authentication. In the right pane, the value in the Issued To column must be the server name. Double-click the certificate, and then determine whether the certificate meets the following requirements: On the General tab, you receive the following message: You have a private key that corresponds to this certificate. On the Details tab, the value for the Subject field must be server name. The value for the Enhanced Key Usage field must be Server Authentication (). On the Certification Path tab, the server name must appear under Certification path. If any one of these requirements is not met, the certificate is invalid.

下一个错误的证书将是我检查您在帖子中列出的症状的地方。