none
An error has occurred while collecting data for Administrative Templates

    Question

  • Hello

    System is Windows Server 2012 R2. (dc)

    A following error “Resource '$(string.SSLCurveOrder)' referenced in attribute displayName could not be found. File C:\Windows\PolicyDefinitions\CipherSuiteOrder.admx, line 26, column 249”  occurs after last update (https://support.microsoft.com/en-us/KB3161606) when tried to check group policy setting.

    I found a few similar problems what associated with inetres.admx but not that CipherSuiteOrder.admx file.

    I think that file is somehow corrupted, any advice or recommendation?

    Br. / Thanks
    Ari

    Tuesday, June 28, 2016 11:41 AM

Answers

All replies

  • > A following error “Resource '$(string.SSLCurveOrder)' referenced in
    > attribute displayName could not be found. File
     
    Either patch the ADMX (remove the policy setting for SSLCurveOrder) or
    change your language to en-us. Or edit your language specific ADML to
    contain the above mentioned ressource entry.
     
    Tuesday, June 28, 2016 3:11 PM
  • I'm having the same problem after updating my Server 2012 R2 admx files with the Windows 10 1511 admx files.

    In other words I should remove the following lines from the current CipherSuiteOrder.admx and .adml?

    ---------------

        <policy name="SSLCurveOrder" class="Machine" displayName="$(string.SSLCurveOrder)" explainText="$(string.SSLCurveOrder_Help)" presentation="$(presentation.SSLCurveOrder)" key="SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002">
          <parentCategory ref="SSLConfiguration" />
          <supportedOn ref="windows:SUPPORTED_Windows_6_4" />
          <elements>
            <multiText id="SSLCurveOrderList" valueName="EccCurves"/>
          </elements>
        </policy>
    -----------------

    Or just restore the original Windows 8.1 & Server 2012 CipherSuiteOrder.admx and .adml.

    Thanks.


    • Edited by ARMeyer-CE Tuesday, August 02, 2016 6:40 PM I thought the SSLCurverOrder lines had been removed with the latest update instead of added.
    Tuesday, August 02, 2016 5:52 PM
  • I got it figured out now...

    I added the following lines after SSLCipherSuiteOrder instruction #6 :

    </string>
          <string id="SSLCurveOrder">ECC Curve Order</string>
          <string id="SSLCurveOrder_Help">This policy setting determines the priority order of ECC curves used with ECDHE cipher suites.
    If you enable this policy setting, ECC curves are prioritized in the order specified.(Enter one Curve name per line)
    If you disable or do not configure this policy setting, the default ECC curve order is used.
    Default Curve Order
    ============
    NistP256
    NistP384
    To See all the curves supported on the system, Use the following command:

    CertUtil.exe -DisplayEccCurve

    THEN added after </textbox> near the bottom of the file:

          </presentation>
          <presentation id="SSLCurveOrder">
            <text>Type the ECC curve names in the preferred order (one curve name per line)</text>
            <multiTextBox refId="SSLCurveOrderList">ECC Curve Order:</multiTextBox>

    After I reopened the GPMC and edited a policy ECC Curve Order showed up under SSL Cipher Suite Order.

    Tuesday, August 02, 2016 10:36 PM
  • > I got it figured out now...
     
    Glad to hear. Overall, ADMX is not rocket science, and the XML Schema is
    publicly available :-)
     
    Wednesday, August 03, 2016 2:17 PM
  • I got it figured out now...

    I added the following lines after SSLCipherSuiteOrder instruction #6 :

    </string>
          <string id="SSLCurveOrder">ECC Curve Order</string>
          <string id="SSLCurveOrder_Help">This policy setting determines the priority order of ECC curves used with ECDHE cipher suites.
    If you enable this policy setting, ECC curves are prioritized in the order specified.(Enter one Curve name per line)
    If you disable or do not configure this policy setting, the default ECC curve order is used.
    Default Curve Order
    ============
    NistP256
    NistP384
    To See all the curves supported on the system, Use the following command:

    CertUtil.exe -DisplayEccCurve

    THEN added after </textbox> near the bottom of the file:

          </presentation>
          <presentation id="SSLCurveOrder">
            <text>Type the ECC curve names in the preferred order (one curve name per line)</text>
            <multiTextBox refId="SSLCurveOrderList">ECC Curve Order:</multiTextBox>

    After I reopened the GPMC and edited a policy ECC Curve Order showed up under SSL Cipher Suite Order.

    Hi.

    I have been trying this for a long time but my xml knowledge is none.

    Can you please paste here how hour  fixed CipherSuiteOrder.admx look like now?

    Mine looks like this (i've delete the first lines because i cant upload links as i'm a new user, sorry):

    ------------------------------------------------------------------------


      </policyNamespaces>
      <resources minRequiredRevision="1.0" />
      
      <categories>
        <category name="SSLConfiguration" displayName="$(string.SSLConfiguration)">
            <parentCategory ref="windows:Network" />
        </category>
      </categories>
      
      <policies>

        <!--Example policy setting with EditText-->
        <policy name="SSLCipherSuiteOrder" class="Machine" displayName="$(string.SSLCipherSuiteOrder)" explainText="$(string.SSLCipherSuiteOrder_Help)" presentation="$(presentation.SSLCipherSuiteOrder)" key="SOFTWARE\Policies\Microsoft\Cryptography\Configuration\SSL\00010002">
          <parentCategory ref="SSLConfiguration" />
          <supportedOn ref="windows:SUPPORTED_WindowsVista" />
          <elements>
            <text id="Pol_SSLCipherSuiteOrder" valueName="Functions" />
          </elements>
        </policy>

      </policies>
    </policyDefinitions>

    -------------------------------------------------------------------------------

    I'll will appreciate your help.


    • Edited by Numa09 Thursday, February 02, 2017 9:02 AM
    Thursday, February 02, 2017 9:00 AM
  • Hi.

    I've found a walk around...

    I've download the new "Administrative Templates (.admx) for Windows 10 and Windows server 2016"and replace the old "Policy Definitions" folder.

    Now it works.

    Regards

    • Proposed as answer by Numa09 Thursday, February 02, 2017 11:49 AM
    Thursday, February 02, 2017 9:18 AM