I have a couple of clients that are unable to perform digital signatures on Outlook emails, Adobe Pro documents, or on an internal Web Forms application (I can't get any specifics about this particular application as I don't know entirely what it is, only that it's on the Domain and its a desktop application). The clients are using Windows XP SP3 32bit with Outlook 2003 and Adobe Pro 9 and X.
When they attempt to sign with Adobe, it simply freezes at the signing event.
When they attempt to sign with Outlook, they get the error "The messaging interface has returned an unknown error. If the problem persists, restart Outlook."
When they attempt to sign with the Web Forms application, they get the error "An error has prevented the signing process from completing.[-2146893802]"
That 2146893802 error code comes up in googling around as "-2146893802 (80090016) Keyset does not exist."
So far, we've attempted to:
- Delete their certificates and request a new one from AD (AutoEnrol)
- Sign an email with the new certificate
- Reprofiled their Domain Account
I've seen similar instances of this kind of problem occur when a private key in a Domain user's profile becomes corrupted, but we've reprofiled their accounts so that's ruled that out. Nothing has changed in the SOE either recently to suggest that a patch or software is causing the problem to occur suddenly.
I've pretty much hit the wall now with my troubleshooting, any thoughts?
p.s. I put this in SuperUser as it seems to me to be more of a Windows Domain problem, not so much a certificate problem. I have checked their actual certificates, and everything seems fine with them. I have requested a certificate from AD myself in testing and successfully signed emails and documents.