Plesk

On Plesk Obsidian for Windows, installing Plesk updates and creating domains fails: Unable to remove product ‘modsecurity’, String must not be empty

Symptoms

Cause

ModSecurity modules were manually removed from IIS - they are missing in Internet Information Services (IIS) Manager > server_name > Modules.

Resolution

  1. Connect to the server using RDP.

  2. Go to Start > Server Manager > Tools > Internet Information Services (IIS) Manager.

  3. Register ModSecurity modules:

    • Go to server_name > Modules:

    • Click Configure Native Modules > Register:

    • Register modules:

      name: ModSecurity IIS (32bits)
      path: C:WindowsSystem32inetsrvModSecurityIIS.dll

      name: ModSecurity IIS (64bits)
      path: C:WindowsSysWOW64inetsrvModSecurityIIS.dll

  4. Restart IIS by opening CMD as Administrator and executing the command:

    iisreset /restart

  5. Complete the update or create a domain/subdomain anew.

Additional information

Instead of removing ModSecurity modules directly from IIS, ModSecurity can be disabled via Plesk: How to disable ModSecurity in Plesk?