Vault 5.1.1 Public Key Issues

[davenptl]

I have the SourceGear Vault Server 5.1.1.19215 installed on a Windows Server 2008 (x64) box. I am able to administer the repository without any issues through the web site interface.

Where I am running into an issue is connecting to the repository using the SourceGear Vault Client. I get the following error message: 'Could not get public key from server'

I've looked in the forums and there doesn't seem to be much on the topic. What could be causing this issue and how can I get it resolved?

Thanks,

Daven Patel

[Beth]

Usually that error relates to the permissions on %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys. First, try opening up the security on that folder. Set the Everyone account to full control and then see if the client works. If the client works, then we can talk about adjusting the security on that folder to only what is needed. If the client doesn't work, then remove the Everyone group from that folder again and let me know your results.

[davenptl]

Beth,

Thanks for the help. Giving Everyone full control on the folder allowed me to successfully connect to the folder.

How do I work the permissions so that only the necessary permissions are granted in order to access the folder?

Thanks,

Daven

[Beth]

Do you recall what options you chose when you installed Vault? What I'm particularly interested is what IIS Process Model you chose. It would have been Machine, System, or Custom. That will give me an idea as to which account needs access set on the MachineKeys folder.

[davenptl]

From what I recall, the IIS Process User I chose was Machine which is mapped to the NT AUTHROITY\NETWORK SERVICE.

When I checked the security on the MachineKeys folder, that account has full control permissions on the folder, which is why I thought I shouldn't be running into any issues when trying to connect from the client software.

Thanks,

Daven

[Beth]

Is the IUSR account listed there as well and the VaultAppPool? If not, try adding those two.

[davenptl]

The IUSR and VaultAppPool accounts are both listed as having full control over the folder.

Daven

[Beth]

Go to your IIS Manager and find the Vault AppPool. One of the columns where the VaultAppPool is listed should show what Identity Vault is set to run under. What do you see?

What managed pipeline mode is the VaultAppPool set to?