You Receive an Error Message When You Make a Secure Call After the Active Directory Migration Tool Is Used (323273)


The information in this article applies to:

  • Microsoft NetMeeting 3.01 for Windows 2000
  • Microsoft NetMeeting 3.01 for Windows NT 4.0
This article was previously published under Q323273
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

If you are using Microsoft NetMeeting, when you try to make a secure call, you may receive the following error message:
NetMeeting was unable to place a secure call. The certificate you have chosen may not be usable with NetMeeting.

CAUSE

This issue may occur if:
  • The Active Directory Migration Tool was used on your network to migrate accounts and profiles. -and-

  • You are a new user with a different security identifier (SID). -and-

  • You do not have the privileges that you must have to call a previous user account's certificate.
Certain private keys are associated with per-user certificates. These private keys are locally encrypted in the registry by using logon information. The user who is logged on when NetMeeting installs the certificate is the only user who can use the private key.

RESOLUTION

To resolve this issue:
  1. Delete the _NmMkCert registry key. To do so, you have to edit the registry.

    WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

    To delete the _NmMkCert registry key:
    1. Start Registry Editor (Regedt32.exe).
    2. Locate and then click the _NmMkCert value under the following key in the registry:

      HKEY_CURRENT_USER\Software\Microsoft\Cryptography\UserKeys\_NmMkCert

    3. On the Edit menu, click Delete, and then click OK.
    4. Quit Registry Editor.
  2. Generate a new default certificate:
    1. Start NetMeeting.
    2. On the Tools menu, click Options.
    3. Click the Security tab, and then click OK.
    4. Repeat these steps for each NetMeeting user.

REFERENCES

For additional information about the error message that is described in the "Symptoms" section of this article and the causes of this error message, click the article number below to view the article in the Microsoft Knowledge Base:

243144 Error Message: NetMeeting Was Unable to Place a Secure Call. The Certificate You Have Chosen May Not Be Usable with NetMeeting.

Modification Type:MajorLast Reviewed:10/9/2002
Keywords:kberrmsg kbprb KB323273
©2002 Microsoft Corporation. All rights reserved.