Answered by:
CRM IFD tool failing on SBS 2003

Question
-
Hi there,
I am currently having an issue getting the CRM IFD tool work on a SBS 2003 premium server. the SBS server was rebuilt with some error still appearing on the event logs, which may or may not be the cause of CRM IFD tool failure. CRM 4.0 is updated with update rollup 5.
What I have is that when I setup all correct settings in CRM IFD interface, at the moment I hit "apply changes" menu option, user access to CRM got interupted. By using the Process Monitor I discovered that not all the changes were done by CRM IFD tool despite that the CRM IFD log stated all operations were done successfully.
The immediate cause that interupted user access to CRM was the incomplete registry changes. According to CRM IFD documentation, there will be a registry keies created:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM\IfdInternalNetworkAddress
From what I can see that key didn't get created / updated. I had to manually create the key with correct value in order to restore user's access to CRM from LAN. Because of that finding, I doubt CRM IFD tool properly made all needed changes to the CRM 4 installation. Specifically I am not sure if the key encryption was enabled by the CRM IFD tool. All other changes that documentation mention can be checked and confirmed except the key encryption. Microsoft documentation doesn't mention anything about how key encryption was done and how to check if it is enabled.
Can anyone shed some light on how to either:
1. enable any advanced debugging feature on CRM IFD tool which might give me more info about what happened under the hood
2. a way to check if the key encryption was enabled.
Thanks!Update - Just did a checking to confirm which change wasn't done, here is the findings:
1. Set <authentication strategy =ServiceProviderLicenseAgreement/> in web.config <authentication strategy="ServiceProviderLicenseAgreement/"> - this is done
2. The Enable anonymous access authentication method on the Microsoft Dynamics CRM 4.0 Web site is marked - this wasn't done
3. The DeploymentProperties table in the MSCRM_Config SQL database has three values that are updated (IfdRootDomainScheme, IfdSdkRootDomain, IfdWebApplicationRootDomain) - this wasn't done
4. The IfdInternalNetworkAddress registry key on the Microsoft Dynamics CRM server is updated - this wasn't done
5. Key encryption will be enabled - there is no way to check
Basically only point 1 was done, all the rest were not done for some reason.
Further checking the log file of CRM IFD, I found that the CRM IFD didn't complete:
10:41:17| Info| === IFD Tool started: 20/07/2009 10:41:17 a.m. ===
10:42:02| Info| Action {0} Succeeded| Get Internet Facing Deployment Network Address Action Value {0}
10:42:07| Info| Action Retrieve List of Organizations in Deployment Succeeded
10:42:07| Info| Action Retrieve Internet Facing Deployment Settings Succeeded
10:45:21| Info| Current Sku : OnPremise
10:45:21| Info| Update Web Config Authentication Strategy 5
10:45:21| Info| Action Update Web Config Authentication Strategy ServiceProviderLicenseAgreement Succeeded
10:45:25| Info| Action SetWebSiteSecurityAction Succeeded
10:45:25| Info| Action SetEndPointDirectorySecurityAction Succeeded
nothing following here...
It is apparently that the CRM IFD log does show that it is incomplete, compared to log file of one of the successful CRM IFD deployment that I did:
14:09:44| Info| === IFD Tool started: 26/04/2009 2:09:44 p.m. ===
14:11:16| Info| Action {0} Succeeded| Get Internet Facing Deployment Network Address Action Value {0}
14:11:17| Info| Action Retrieve List of Organizations in Deployment Succeeded
14:11:17| Info| Action Retrieve Internet Facing Deployment Settings Succeeded
14:11:31| Info| Current Sku : OnPremise
14:11:31| Info| Update Web Config Authentication Strategy 5
14:11:31| Info| Action Update Web Config Authentication Strategy ServiceProviderLicenseAgreement Succeeded
14:11:31| Info| Action SetWebSiteSecurityAction Succeeded
14:11:31| Info| Action SetEndPointDirectorySecurityAction Succeeded
14:11:31| Info| Action SetMetaFileSecurityAction Succeeded
14:11:31| Info| Action SetCrmDeploymentServiceFileSecurityAction Succeeded
14:11:31| Info| Action SetImgDirectorySecurityAction Succeeded
14:11:31| Info| Action SetStaticDirectorySecurityAction Succeeded
14:11:31| Info| Action SetPassportSPLADirectorySecurityAction Succeeded
14:11:32| Info| Action UpdateIfdSettingsAction Succeeded
14:11:32| Info| Action AddAuthenticationSettings Succeeded
14:11:32| Info| Action CreateKeySettings Succeeded
14:11:32| Info| Action SetIfdInternalNetworkAddressAction Succeeded
14:13:43| Info| Current Sku : OnPremise
14:13:43| Info| Update Web Config Authentication Strategy 5
14:13:43| Info| Action Update Web Config Authentication Strategy ServiceProviderLicenseAgreement Succeeded
14:13:43| Info| Action SetWebSiteSecurityAction Succeeded
14:13:43| Info| Action SetEndPointDirectorySecurityAction Succeeded
14:13:43| Info| Action SetMetaFileSecurityAction Succeeded
14:13:43| Info| Action SetCrmDeploymentServiceFileSecurityAction Succeeded
14:13:43| Info| Action SetImgDirectorySecurityAction Succeeded
14:13:43| Info| Action SetStaticDirectorySecurityAction Succeeded
14:13:43| Info| Action SetPassportSPLADirectorySecurityAction Succeeded
14:13:43| Info| Action UpdateIfdSettingsAction Succeeded
14:13:43| Info| Action AddAuthenticationSettings Succeeded
14:13:43| Info| Action CreateKeySettings Succeeded
14:13:43| Info| Action SetIfdInternalNetworkAddressAction Succeeded
14:13:43| Info| Current Sku : OnPremise
14:13:43| Info| Update Web Config Authentication Strategy 5
14:13:43| Info| Action Update Web Config Authentication Strategy ServiceProviderLicenseAgreement Succeeded
14:13:43| Info| Action SetWebSiteSecurityAction Succeeded
14:13:43| Info| Action SetEndPointDirectorySecurityAction Succeeded
14:13:43| Info| Action SetMetaFileSecurityAction Succeeded
14:13:43| Info| Action SetCrmDeploymentServiceFileSecurityAction Succeeded
14:13:43| Info| Action SetImgDirectorySecurityAction Succeeded
14:13:43| Info| Action SetStaticDirectorySecurityAction Succeeded
14:13:43| Info| Action SetPassportSPLADirectorySecurityAction Succeeded
14:13:43| Info| Action UpdateIfdSettingsAction Succeeded
14:13:43| Info| Action AddAuthenticationSettings Succeeded
14:13:43| Info| Action CreateKeySettings Succeeded
14:13:43| Info| Action SetIfdInternalNetworkAddressAction Succeeded
07:55:16| Info| === IFD Tool exiting: 27/04/2009 7:55:16 a.m. ===
I remember somewhere on the net I read a article mentioning about the progress bar of CRM IFD tool went through about 50% then disappear without reaching 100%, which indicates CRM IFD tool didn't complete the task for some reason. I cannot find that article again now, would be helpful if someone can get me the link, because that symptom is exactly what I am having currently.Friday, July 31, 2009 1:42 AM
Answers
-
I'm running into similar issues on an SBS 2003 deployment. I've gotten a little further along since I found that the registry had an incorrect entry for the CRM website IIS identifier. The 'website' registry key at \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM had a value of '/LM/W3SVC/1' and it should have been '/LM/W3SVC/5' - The identifier '1' was for the default website, whereas CRM was installed in IIS as the website '5'.
Hope this helps get you a step further.
Matt Wittemann, MVP for CRM (http://icu-mscrm.blogspot.com)- Marked as answer by Jim Glass Jr Tuesday, September 1, 2009 4:00 PM
Tuesday, September 1, 2009 2:26 PMModerator
All replies
-
I'm running into similar issues on an SBS 2003 deployment. I've gotten a little further along since I found that the registry had an incorrect entry for the CRM website IIS identifier. The 'website' registry key at \HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSCRM had a value of '/LM/W3SVC/1' and it should have been '/LM/W3SVC/5' - The identifier '1' was for the default website, whereas CRM was installed in IIS as the website '5'.
Hope this helps get you a step further.
Matt Wittemann, MVP for CRM (http://icu-mscrm.blogspot.com)- Marked as answer by Jim Glass Jr Tuesday, September 1, 2009 4:00 PM
Tuesday, September 1, 2009 2:26 PMModerator -
Thanks Matt, I have already checked that and the CRM website doesn't have ID 1. I have engaged Microsoft premier support for this, and they are currently working on it. so far they have found interesting inconsistencies in the MSCRM_Config database.
JohnmenThursday, September 10, 2009 2:41 AM -
Hi Matt,
I have to apologise for my previous reply as I just found out what you pointed it out was exactly the cause of my issue. I do recall that I have checked it before but it turned out that key still had the wrong value. Perhaps because the CRM was re-installed twice and I was remembering the checking done on the first installation. But anyway I would like to thank you for the useful info. Once I corrected the value, the CRM IFD tool started working fine without any problem!
JohnmenSaturday, September 12, 2009 11:14 AM -
Glad that helped!
Matt Wittemann, MVP for CRM (http://icu-mscrm.blogspot.com)Monday, September 14, 2009 2:27 AMModerator