Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Wednesday, July 31, 2019 5:24 PM
Hello fellows,
We have been asked to disable some Cipher Suites from our SharePoint 2013 Servers. So far everything is working fine, but we are not able to make Secure Store to work properly. In the past we made same change, but we applied best practices option (we are using Nartac Software IIS Crypto 3.0 to achieve this) and that got rid of the issue. Now we have been forced to disable other suites and Secure Store is not working again.
Does anybody knows what cipher suite Secure Store Uses? It's like a pain in the @ss, cause each time we apply changes, we need to submit tickets to get boxes restarted to get changes in place. Below are the Schannels actived and Cipher Suites turned on. Any help will be highly appreciated. Thanks.
All replies (4)
Thursday, August 1, 2019 1:20 AM
Hi Murillo,
I am not sure about the question you asked but as per my understanding your issue is :
Secure Store Shared Service is not responding. Please contact your administrator:
- In order to resolve this, please do the following steps:
- Select “ Manage services on server”. under Application Management.
- Stop and start the “Secure store service” .
- Open “Inetmgr” and select “SecurityTokenServiceApplicationPool” and do restart.
- Perform IISReset.
Thanks & Regards,
sharath aluri
Thursday, August 1, 2019 8:16 AM
Hi Gregory,
You can check the article: How to Determine the Cipher Suite for the Server and Client
And based on your error message, you can firstly check the post from Sharath, if the issue exists, try to troubleshoot your issue as following:
1. Run the command via SharePoint 2013 management shell to provision the Secure Store Service application:
$service = Get-SPServiceInstance | Where-Object {$_.TypeName -eq “Secure Store Service”}
$service.Provision()
2. The service account in IIS Application pool must have "Logon as Service" and "Logon as batch" rights granted.
3. Grant "FULL" control to "Farm Account" in Secure store service application. Go to: Central Administration >> Application Management >> Manage Service Applications >> Pick Secure Store Service >> Click On "Permission" in Ribbon >> Add your Farm account and set Full Control.
4. Do an IISReset
Best regards,
Grace Wang
Please remember to mark the replies as answers if they helped. If you have feedback for TechNet Subscriber Support, contact [email protected].
SharePoint Server 2019 has been released, you can click
here to download it.
Click
here to learn new features. Visit the dedicated
forum to share, explore and talk to experts about SharePoint Server 2019.
Thursday, August 1, 2019 1:53 PM
Thanks Grace,
All those steps were already executed. The only change applied was the changes on Cipher. Since that Secure Store is not working. What I am looking for is for the Cipher Suites used by Secure Store to establish a connection and have service available.
I will check the URL you provided and go from there.
Thanks,
Thursday, August 1, 2019 1:55 PM
Thanks Sharath,
Your steps were executed with no luck. Since we are changing Cipher Suites, that is causing the issue avoiding Secure Store to be available
Regards,