SChannel error- The SSL server credential's certificate does not have a private key information property attached to it.

We have a public SSL certificate that allows for Active Directory sync with LDAPS on port 636 with our email smart host. This was working fine and suddenly stopped working and we are now getting SChannel errors Event ID 36869. There were no changes made
to the Exchange server, the firewall or the DC which holds the certificate. I have run a new certreq from the DC and then re-keyed the public SSL certificate and re-installed 3 times but the error does not go away and AD Sync with the vendor
fails. When I run LDP.exe the connection on port 636 fails with "cannot open connection" and the system event log throws the S Channel event 36869 "The SSL server credential's certificate does
not have a private key information property attached to it"  There is no software firewall set on the DC. When I run Certutil -VerifyStore MY  it shows the current certificates as well as the revoked and expired certificates
correctly. Certificate 0 is the public cert and is listed with Server and Client authentication, the FQDN of the server is correct and "Certificate is Valid" is listed. The private cert is Certificate 1 and has server and client authentication, the
FQDN is correct, Private key is not exportable and it ends with Certificate is Valid. I do not see a point in re-keying the cert again until I figure out what the root of the problem is. I have read in some forums that the private cert should not be set to
expire after the public cert but that does not make a lot of sense when in a situation like this the private cert is of course newer than the public. In fact it is too early to renew the public cert. I have been troubleshooting this for a few days and at this
point I would have to drop my AD sync with the vendor to LDAP in order to add new users. I do not want to do that for obvious reasons and I do not want to have our spam filtering and email archive service running without Directory sync. Any help would be greatly
appreciated.

Hi,
Have you tried this?
How to assign a private key to a new certificate after you use the Certificates snap-in to delete the original certificate in Internet Information Services
http://support.microsoft.com/kb/889651
Best Regards,
Amy

Similar Messages

  • AZURE The specified certificate could not be found in the LocalMachine certificate store,or the certificate does not have a private key.

    Hello,
    I try to make a HV website in Azure. It took me hours to figure out how to make a HV certificate with my own password. But I figured it out. With the HV application manager I uploaded the certificate to the HV platform. This worked fine. Then I created a
    c# project with also works well on my local machine.
    This is the code I use in the web.config
    <appSettings>
    <add key="ApplicationId" value="24ee15be-1497-4719-ad70-d1223adbf021" />
    <add key="ShellUrl" value="https://account.healthvault-ppe.co.uk/" />
    <add key="HealthServiceUrl" value="https://platform.healthvault-ppe.com/platform/" />
    <!-- when we call the SignOut() method on HealthServicePage, it redirects us to the page below -->
    <add key="NonProductionActionUrlRedirectOverride" value="Redirect.aspx" />
    <!-- The redirect page (specified above) uses these keys below to redirect to different
    pages based on the response from the shell -->
    <add key="WCPage_ActionHome" value="default.aspx" />
    <add key="WCPage_ActionAppAuthSuccess" value="default.aspx" />
    <add key="WCPage_ActionSignOut" value="SignedOut.aspx" />
    </appSettings>
    Next step is to deploy the site to Azure. I was able to upload the certicate to Azure.
    After deploy I get the following error:
    System.Security.SecurityException: The specified certificate, CN=WildcatApp-24ee15be-1497-4719-ad70-d1223adbf021, could not be found
    in the LocalMachine certificate store,or the certificate does not have a private key.
    I checked the certificate on another server with a different key in the web.config
    <add key="ApplicationCertificateFileName" value="c:\Zodos\website\WildcatApp-24ee15be-1497-4719-ad70-d1223adbf021.pfx"/>
    This gives me this error:
    Exception Details: System.Security.Cryptography.CryptographicException: The specified network password is
    not correct.
    So the procedure I followed definitely was not correct:
    It works on my local machine
    It doesn't work on another server or on Azure
    I can see that the procedure I follow is not correct, but what am I doing wrong?
    Wilfred

    I am having the same problem. I see I have updates thru the Mac App Store but when I try and run the System updates in the Mac App Store it errors out. But I can update third party apps.
    Have even tried going thru Terminal to check for software updates but still have same error claiming it can not find the hostname server.
    Jefre

  • Workflow Manager Configuration - Certificate with Thumbprint does not have a private key

    After following the video series on how to install and Configure Workflow Manager into SharePoint 2013 http://technet.microsoft.com/en-us/library/dn201724(v=office.15).aspx,
    I get to the 'Configure Certificates' section in the Workflow Manager Configuration:  I browse to our wildcard certificate and select it.
    When I try to move to the next page of the configuration wizard, I get the following red error under the certificate:
    Certificate with thumbprint LONG STRING does not have a private key.
    I checked the properties of the certificate, and it says: You have a private key that corresponds to this certificate.
    What am I missing??
    Thank you.
    macrel

    Hi,
    According to your post, my understanding is that you got error under the certificate.
    Please make sure you configure the workflow manager correctly.
    More information:
    Install and configure workflow for SharePoint Server 2013
    Installing and Configuring Workflow Manager 1.0
    Best Regards,
    Linda Li
    Linda Li
    TechNet Community Support

  • A fatal error when attempting to access the SSL server credential private key. Error code 0x8009030d. Windows 8.1.

    Hi,
    We develop a server-side application which receives incoming https connections using self-signed certificate. It was all ok while we were using Windows 7 or Windows 2008 as OS, but when our clients started installing Windows 8 as server OS they encountered
    big problem: application got unavailable in few hours after start. 
    In event logs we have following:
    A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.
    After restart, application recreates certificate and all works normal few hours till next fatal error.
    This
    article did not help us. And I repeat that this error appears only on Windows 8 (we tested on Windows 8.1). Windows 2012 Server we did not test yet.
    How we can solve this problem?
    Best regards.

    Hi,
    Since this article released in 2008,I suspect the code mentioned in this article doesn't  supprot Windows 8.
    And since the certificate was written by C#,I suggest you submit a new case on MSDN Forum as they will be more professional on your issue:
    https://social.msdn.microsoft.com/Forums/en-US/home
    Regards,
    Kelvin hsu
    TechNet Community Support

  • Com.adobe.flashaccess.sdk.cert.ServerCredentialException: Certificate does not have the required ext

    [ Problem ]
    I’m running the sample encryption code and I’m running in to this exception:
    "com.adobe.flashaccess.sdk.cert.ServerCredentialException: Certificate does not have the required extended key usage".  I tried looking it up on javadocs but it doesn’t really tell me what’s causing it.  I get this error when encryptContent is called.  Is this something in my settings/environment or something with the certificates?
    [ Solution ]
    If you are using the EncryptContent.java sample code, please check which credential you are using for the "packagerCredentialFile" variable.  Make sure this is pointing at the .pfx file containing the packager credential.

    [ Problem ]
    I’m running the sample encryption code and I’m running in to this exception:
    "com.adobe.flashaccess.sdk.cert.ServerCredentialException: Certificate does not have the required extended key usage".  I tried looking it up on javadocs but it doesn’t really tell me what’s causing it.  I get this error when encryptContent is called.  Is this something in my settings/environment or something with the certificates?
    [ Solution ]
    If you are using the EncryptContent.java sample code, please check which credential you are using for the "packagerCredentialFile" variable.  Make sure this is pointing at the .pfx file containing the packager credential.

  • Transport certificate does not have the correct issuer or is expired

    Hi all,
    I hope this is not a duplicate question.
    We are assisting a partner company set up the Flash Access ecosystem.  They have asked us to help packaged some content for them using certificates issued to them.  I've been trying to package content that works fine when using our certificates but I keep getting this error : Transport certificate does not have the correct issuer or is expire when I try to package with their certificates.
    The certificate has not expired.  That was the first thing I checked.
    Has anyone run into this error?  I am using the reference implementation for packaging if that helps.
    Thanks.
    Pedro.

    Hi Katherine,
    Thanks for responding. 
    Indeed I do have the adobe-flashaccess-certs.jar in my path.  I was able to package with a certificate issued to our own company.  Our Certificates were Trial Certificates.  The ones I am having problems with are test PKI certificates that our partner sent to us so that we can help them out. 
    Please let me know if you need any more info.  I am definitely down with helping someone trying to help me!
    Thanks.
    Pedro.

  • Visual Studio 2012 SharePoint Project Error : The partial project item type does not have a value for this property

    Hi,
    I am getting this error from visual studio 2012 whenever i try to create the following project types:
    - Workflow Custom activity
    - Web parts
    The error is as mentioned below
    "The partial project item type does not have a value for this property"
    Due to this the when I add above type of items in my project, they show a red cross icon against them.
    Please let me know If have you any solution?

    Hi
    I had same issue. Below is the solution
    Installing
    "Visual Studio 2012 Update 3" usually solves this problem. (You can download it through microsoft's official site at
    "http://www.microsoft.com/en-in/download/details.aspx?id=39305")
    Hansraj Rathva

  • TS3212 I have removed my pop-up blocker completely and still receive the following error message when attempting to download iTunes:  "The file was blocked because it does not have a valid digital signature that verifies its publisher".....any ideas?

    have removed my pop-up blocker completely and still receive the following error message when attempting to download iTunes:  "The file was blocked because it does not have a valid digital signature that verifies its publisher".....any ideas?

    That suggests that the installer is getting damaged during the download.
    I'd first try downloading an installer from the Apple website using a different web browser:
    http://www.apple.com/itunes/download/
    If you use Firefox instead of IE for the download (or vice versa), do you get a working installer?

  • Error : Rowkey does not have any primary key attributes

    Hello All,
    I'm developing an ADF application which has a few ADF forms. The forms have VO's and some tables.
    On running, I seem to be getting this error
    <Error> <oracle.adfinternal.view.faces.model.binding.CurrencyRowKeySet> <BEA-000000> <ADFv: Rowkey does not have any primary key attributes. Rowkey: oracle.jbo.Key[], table: oracle.jbo.server.ViewObjectImpl@2ecf4f19.>
    Where does the Rowkey have to be set? Is it in the VO?
    Regards,
    PP

    Make sure that the VO's you use have at least one attribute selected as a key attribute. GO to View Object overview editor and select attributes tab, see whether there is at least one attribute marked as a key. If not select the most appropriate attribute from the list of fields and go to edit attribute dialog, tick the key attribute property.

  • Loans document error Document header does not have a reconciliation key

    Hi All,
    I am trying to post a loans document through EK25 and while saving the document following erros is coming
    Formal error: Document header does not have a reconciliation key
    Message no. >0037
    Diagnosis
    You tried to post a document but a reconciliation key is missing from the document header. Since mass processing does not apply here (where the reconciliation key is automatically created) you must enter a reconciliation key.
    System Response
    Error message. Processing is terminated.
    Procedure
    Contact your system administrator.
    Procedure for System Administration
    If the program error occurred in an
    SAP standard program, enter a problem message
    Own program, correct the program
    Any input appreciated.
    Thanks,
    VR

    Hi,
    You need to assign the reconcilation group to the SAP user ID you are using to post the loan document.
    The reconciliation group is required if user-specific reconciliation keys are to be proposed automatically.
    The reconciliation group is freely selectable.
    Go to the following path in IMG-
    IMG->Financial Accounting->Contract Accounts Receivable and Payable->Basic Functions->Postings and Documents->Document-.Define Default Values->Maintain Rules for Reconciliation Key Default Values->Maintain Reconciliation Groups for Default Values
    Maintain the SAP User ID that you are using along with a reconciliation group.
    After, you maintained the user ID and saved it, try to post the loan document again.
    Hope it helps..
    Thanks,
    Amlan

  • I purchased the multi-user iworks and recently had to replace my white imac's hard drive but didn't pay to fix the CD drive.  My iworks does not have a serial number on the box and now that my CD drive isn't working how can I reinstall this software?

    I purchased the multi-user iworks (yes back when it was new, 2009 or 2010 and recently had to replace my white imac's hard drive (but didn't pay to fix the CD drive).  My iworks does not have a serial number on the box and now that my CD drive isn't working how can I reinstall this software?

    Buy or borrow an external USB optical drive.
    See the confirmation email or covering letter to obtain the serial number. If you have lost it, contact the supplier.

  • When I try to download an iTunes software update I get an error message that my start up disk does not have enough room.  What do I do?

    When I try to download an iTunes software update i get an error message that my start up disk does not have enough room.  What do I do?

    You probably have run out of space, I would delete (or move to an external drive) things that aren't being used as much.

  • I have  an iphon 4 got the new ios 7 and I need to redo my icloud but I dont have the password for it and apple does not have the infromation form the old account what should I do to turn off find my iphone

    I have  an iphon 4 got the new ios 7 and I need to redo my icloud but I dont have the password for it and apple does not have the infromation form the old account what should I do to turn off find my iphone

    To to http://iforgot.apple.com and sign in with your iCloud ID. A new password will be sent to the associated email address.
    It this doesn't work, go to https://getsupport.apple.com ; click 'More Products and Services, then 'Apple ID', then 'Other Apple ID Topics' then 'Lost or forgotten Apple ID password'.

  • HT2434 does anybody know what happens if I dont update the firmware of my macbook pro (does not have a guid partition scheme))

    does anybody know what happens if I dont update the firmware of my macbook pro (does not have a guid partition scheme)?

    Apple will hire a high school girls clique to follow you around, make fun of you & post disparaging comments on Facebook .

  • HT1529 Where do i find the serial No on a IMac 4.1 please? I have looked on the "about this Mac" but it does not have the serial No on it!

    Where do i find the serial No on a IMac 4.1 please? I have looked on the "about this Mac" but it does not have the serial No on it!

    Until last July, the model identifier on every Intel Mac would tell you exact minimum and maximum expansion in terms of RAM, retail operating system, and any system specific required firmware updates, video and audio expansion capabilities, and patches for Wifi available.  The serial number is only of consequence if you wish to date a Mac down to the week.  This can help in determining system specific disks, available warranty, and exchange/repair program eligibility.  Outside of that the year and month can usually be narrowed down to a six month period with model identifier alone on all except MacPros.  So my question is, is it really that relevant for your needs?

Maybe you are looking for

  • My iTunes artwork is mixed up on my iPod... Any help?

    For some odd reason, a large part of the album artwork from my iTunes library mixed up when I loaded my iTunes library onto my iPod. In other words, when R.E.M. is playing "It's The End Of The World," the CD cover shown happens to be David Crowder Ba

  • Music not showing up in iPod

    My wife & I both have 30GB iPods. She has been managing her's from her computer, I've been managing mine from mine. Recently she wanted some music I had already ripped to my computer. I hooked up her iPod, everything looked fine, I copied the music,

  • Cant find transfereed video and music files

    i transferred some video and audeo files from my computer by blue tooth to my nokia lumia 630, but cant findwhere to find them to play

  • Wanted: Popup which allows the user to enter one string

    Hello, as the topic states, I am searching for a (modal) popup which lets the user enter one string in a text field and returns this string. I am currently using the function module 'POPUP_TO_GET_ONE_VALUE' for this purpose which works quite good - B

  • Receiving mail

    Does anyone know how to connect IPOD Touch to Tiscali mail in the UK. I use Outlook 2003 and have manually inserted and synced from a laptop the account details across to the Touch. It keeps saying 'cannot download mail - incorrect user name or passw