| Event Id | 1121 |
| Source | ClusSvc |
| Description | The crypto checkpoint for cluster resource sa1 could not be restored to the container name EXPWMGMT-44a028991371419ebf3cc0661fafe7c1. The resource may not function correctly. Data: 0000: 05 00 00 00 |
| Event Information | According to Microsoft: CAUSE: This problem can occur because every time that a cluster starts a resource (for example, during a failover), the cluster restores the registry key in which the cluster states from the last known good state are kept. A security descriptor is set on the key container, by default, to which the local system account has full privileges, but to which administrators have read-only privileges. The first time that a failover occurs, the key file is created and the security descriptor is set. The next time that a failover occurs, the key container already exists, but the cluster checkpoint code updates the key anyway. Because the key container has a security descriptor that does not allow the key container to be overwritten by the cluster service account, the cluster falls back to the restore privilege and updates the key. Then the security descriptor is set, but there is no fallback with the restore privilege in this case, therefore restoration does not work and generates the error message in the System event log. RESOLUTION: To resolve this problem, please contact Microsoft Product Support Services for assistance. |
| Reference Links | XADM: Cluster Event ID 1121 Error Message "The Crypto Checkpoint for Cluster Resource |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.