"Could Not Initialize ISA Server Settings" error message when you try to install ISA Server 2000 (811085)


The information in this article applies to:

  • Microsoft Internet Security and Acceleration Server 2000
  • Microsoft BackOffice Server 2000
  • Microsoft Small Business Server 2000
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

When you try to install Microsoft Internet Security & Acceleration Server 2000 (ISA Server 2000), you may receive an error message similar to the following:
Could not initialize ISA Server settings.
Also, the following entries may appear in the Isas.log file (which is in the C:\Program Files\Microsoft ISA Server folder by default):

ISA Setup: At GenServerPublicKey
ISA Setup: CryptGenKey failed. Error=0x80090020
ISA Setup: GenServerPublicKey failed
ISA Setup: Msg No:10174 Could not initialize ISA Server settings.

CAUSE

This issue may occur if the default behavior of the cryptography subsystem has been modified.

RESOLUTION

To resolve this issue, restore the cryptography subsystem to its default settings, and then install ISA Server 2000. To do this, follow these steps: WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
  1. Click Start, click Run, type regedit, and then click OK.
  2. Navigate to the following registry subkey:

    HKEY_USERS\.DEFAULT\Software\Microsoft\Cryptography

  3. On the Registry menu, click Export Registry File.
  4. Type cryptography-key in the File name box, and then click Save.

    Note If you have to restore this registry key: double-click the Cryptography-key.reg file that you saved.
  5. On the Edit menu, click Delete, and then click Yes to confirm the removal of the Cryptography key.
  6. Quit Registry Editor, and then restart ISA Server 2000 Setup.

    Note In some cases, the Cryptography registry key is restored if you restart the computer after you remove the key. If you then try to install ISA Server 2000, the installation may not work. Therefore, it is better if you try to install ISA Server 2000 without first restarting the computer. If you cannot successfully install it, restart the computer, make sure that the Cryptography registry key has not been restored, and then install ISA Server 2000.

REFERENCES

For additional information about how to install and configure ISA Server 2000, click the following article number to view the article in the Microsoft Knowledge Base:

300876 How to connect your company to the Internet by using ISA Server 2000 with Windows 2000

For additional information about how to configure ISA Server 2000, visit the following Microsoft Web site:

http://www.microsoft.com/technet/security/prodtech/isa/isa-qs.mspx

Modification Type:MajorLast Reviewed:11/17/2004
Keywords:kbprb KB811085
©2004 Microsoft Corporation. All rights reserved.