The Directory Service fails to completely start with event ID: 8600.

book

Article ID: 100074687

calendar_today

Updated On:

Description

Error Message

When launching the Vault Admin Console, it will fail with the following: 

Could not connecto to the Enterprise Vault Directory on 'localhost'. Check that 'localhost' is available on the network and that Enterprise Vault Directory Service is running. 

 

A DTrace of the DirectoryService will show as follows: 

 

56    14:36:05.401     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#504} Database Name: Provider=MSOLEDBSQL19;Data Source=SQL01;Initial Catalog=EnterpriseVaultDirectory;Integrated Security=SSPI;DataTypeCompatibility=80;Use Encryption for Data=Optional;Trust Server Certificate=False;Host Name In Certificate=
57    14:36:05.463     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#658} Failed to Open Connection hr: Unspecified error  (0x80004005)
58    14:36:05.463     [10016]    (DirectoryService)    <7436>    EV:L    DecodeAndLogError entry
59    14:36:05.463     [10016]    (DirectoryService)    <7436>    EV:H    {DecodeAndLogError:#931} Error Description: [SSL Provider: The certificate chain was issued by an authority that is not trusted.|]
60    14:36:05.463     [10016]    (DirectoryService)    <7436>    EV:H    {LogADOError:#1121} Native error: [-2146893019]
61    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV~E    Event ID: 13360 An error was detected while accessing the Vault Database 'Provider=MSOLEDBSQL19;Data Source=SQL01;Initial Catalog=EnterpriseVaultDirectory;Integrated Security=SSPI;DataTypeCompatibility=80;Use Encryption for Data=Optional;Trust Server Certificate=False;Host Name In Certificate=' (Internal reference: CC1): |Description:  |SSL Provider: The certificate chain was issued by an authority that is not trusted.| | |SQL Command: | N/A| | |Additional Microsoft supplied information:| |Source:       Microsoft OLE DB Driver 19 for SQL Server |Number:       0x80004005 |SQL State:    08001 |Native Error: -2146893019 |HRESULT|0xc0043433| |

63    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {DecodeAndLogError:#931} Error Description: [Client unable to establish connection]
64    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {LogADOError:#1121} Native error: [-2146893019]
65    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV~E    Event ID: 13360 An error was detected while accessing the Vault Database 'Provider=MSOLEDBSQL19;Data Source=SQL01;Initial Catalog=EnterpriseVaultDirectory;Integrated Security=SSPI;DataTypeCompatibility=80;Use Encryption for Data=Optional;Trust Server Certificate=False;Host Name In Certificate=' (Internal reference: CC1): |Description:  |Client unable to establish connection| | |SQL Command: | N/A| | |Additional Microsoft supplied information:| |Source:       Microsoft OLE DB Driver 19 for SQL Server |Number:       0x80004005 |SQL State:    08001 |Native Error: -2146893019 |HRESULT|0xc0043433| |
66    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {LogADOError:#1335} Error Source:[Microsoft OLE DB Driver 19 for SQL Server], Number:[0x80004005] SqlState:[08001] Native error:[-2146893019] Result:[0xc0043433], Ref:[CC1] Command:[(null)]
67    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:L    DecodeAndLogError exit.
68    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#702} Free the COM object. hr: 0xc0043433 hr: The SQL database server detected a deadlock  while accessing the Vault Database '%2'     Description:         %1       Additional Microsoft supplied information:     Source:       %3   Number:       %4   SQL State:    %5   Native Error: %6   HRESULT  %7     SQL Command:   %8        (0xc0043433)
69    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#706} Releasing connection. hr: 0xc0043433 hr: The SQL database server detected a deadlock  while accessing the Vault Database '%2'     Description:         %1       Additional Microsoft supplied information:     Source:       %3   Number:       %4   SQL State:    %5   Native Error: %6   HRESULT  %7     SQL Command:   %8        (0xc0043433)
70    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:L    CADOContext::CreateConnection exit. source:Provider=MSOLEDBSQL19;Data Source=SQL01;Initial Catalog=EnterpriseVaultDirectory;Integrated Security=SSPI;DataTypeCompatibility=80;Use Encryption for Data=Optional;Trust Server Certificate=False;Host Name In Certificate= hr=The SQL database server detected a deadlock  while accessing the Vault Database '%2'     Description:         %1       Additional Microsoft supplied information:     Source:       %3   Number:       %4   SQL State:    %5   Native Error: %6   HRESULT  %7     SQL Command:   %8        (0xc0043433)
71    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:M    {ReadTimeOutInfoInfo:#447} Timeout: caught _com_error with error 0xC0043433
72    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:L    Connection timeout value ='120s', Minimum value ='5s'
73    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#658} Failed to Open Connection hr: Unspecified error  (0x80004005)
74    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#702} Free the COM object. hr: 0x80004005 hr: Unspecified error  (0x80004005)
75    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    {CADOContext::CreateConnection:#706} Releasing connection. hr: 0x80004005 hr: Unspecified error  (0x80004005)
76    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:L    CADOContext::CreateConnection exit. source:Provider=MSOLEDBSQL19;Data Source=SQL01;Initial Catalog=MASTER;Integrated Security=SSPI;DataTypeCompatibility=80;Use Encryption for Data=Optional;Trust Server Certificate=False;Host Name In Certificate=; hr=Unspecified error  (0x80004005)
77    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV:H    CDirectoryServiceObject::CheckDirectoryEntry - Directory database existence check has failed. The connection to SQL Server could not be established.   The connection will be tried repeatedly until the Directory Service is stopped.   SQL Server : %1      (0xc0042198)
78    14:36:05.479     [10016]    (DirectoryService)    <7436>    EV~E    Event ID: 8600 The connection to SQL Server could not be established. |The connection will be tried repeatedly until the Directory Service is stopped. |SQL Server : SQL01 |

 

 

Cause

This issue can be caused protocol on the SQL Server Network Configuration. Where the Protocols are set to 'Force Encryption' but there is no associated Certificate on the protocol in SQL. 

 

Here we can see that 'Force Encryption' is set to 'Yes'. 

 

However, there is no associated Certificate: 

Resolution

To resolve this issue in a scenario where a Certificate is not intended to be used perform the following on the associated SQL server: 

  • Launch SQL Server Configuration Manager
  • Expand SQL Server Network Configuration
  • Select 'Protocols' and right click for
  • Select Properties
  • Select Flags
  • Set 'Force Encryption' =  NO
  • Select 'Apply'
  • Then restart the SQL Server Service for the change to take affect
  • Attempt to start the Directory Service, and verify the errors no longer occur. 

Issue/Introduction

The Directory Service fails to completely start with event ID: 8600. When reviewing Services.msc, the service will show as running.