Error adding verify.der to certificate list

Dear All,
I am trying to configure single sign on from my portal. I started by downloadind the verify.der file from the portal and configure the parameter in RZ10 as follow
login/accept_sso2_ticket 1
login/create_sso2_ticket 2
Then i try to import the verify.der to R/3 in STRUSTSSO2. After i browse the verify.der file, when i click on the add to certificate list, it is giving me the following error
Error occurred during import
Message no. TRUST008
Anyone know something about this?
Thanks
Regards,
Bryan

Hi Brain,
After you download the verify.zip file and unzip it to verify.der, do you find any content being displayed.
Also, you can try this...
1. Go to Visual Administration.
2. And generate a new certificate.
3. Then download the same using system administration-key storage and try.
Regards,
Sandeep Tudumu

Similar Messages

On a propritary web site I use, I get an error trying to upload a document; in IE I can solve this by adding the site to the list of trusted sites, how do I handle it in Firefox?

The error message is
Server Error in '/' Application.
StartIndex cannot be less than zero. Parameter name: startIndex
I can avoid the message in IE by adding the site to the list of trusted sites.
How do I accomplish the same thing in Firefox?

stewlyons wrote:
how do i know if anyone's posted an answer, or help? do i have to keep coming back here to look, see? or can someone send me an e-mail? (not sure i would know where to go back to) thanks.
First, you should be receiving email notifications of any reply; you haven't because there haven't been any. Second, should you be able to access that website? Have you done it before? Occasionally, I've gotten a similar message from websites I frequent but trying later will often clear the problem. Other times, I've gone to websites I really don't have permission to access and the website knows it. Also, you might try another browser, such as Firefox or Opera.
Finally, if you mean the Birchmere Music Hall, I get the same error message, and if Ticketmaster needs to access that website for ticket and event dates, it can't get through either. I'd suggest waiting for whomever handles the Birchmere website to fix it, or call them on the phone.
BTW, it's not a good idea to put your email address out for all to see. If you can still edit the post, delete it.
<E-mail Edited by Host>

An error occurred while adding the Cluster to the list

Hello,
I've installed the HFM 9.3.1 client on a Windows Server 2003 machine and now I'm attempting to configure it. I get all the way to the Server/Cluster Registration and when I try to add my one and only HFM application server to the list I'm present with this error.
"An error occurred while adding the Cluster to the list".
I don't see anything of use in the config tool log and as a result, I'm stuck. The odd thing is that not more than 10 minutes previously I added just finished installing the HFM client on another Windows Server 2003 machine and it installed / configured perfectly.
What am I missing?
Thanks!

You may have a DNS error of sorts. From a command line on the server which presents the error, ping the servername you are trying to reach. Do not use the cluster name, but instead use the server name or IP address. If you successfully reach it, use this in the registration utility. Once the server has been reached, it will return the cluster's name. If you cannot reach it using ping, focus on the underlying DNS problem.
--Chris

How to import a certificate verify.der.cer to enable SSO

How to import a certificate verify.der.cer to enable SSO

Hi Chitrangada,
You havent mentioned if you need to configure SSO between which two systems. However, assuming that you are configuing the access of an ABAP system from a portal, you can import the verify.der file in TA STRUSTSSO2.
The entire procedure is available at:
http://help.sap.com/saphelp_nw70/helpdata/en/12/9f244183bb8639e10000000a1550b0/frameset.htm
Hope it helps!
Best Regards,
Srividya.R

How to add a certificate to IIS global "Server Certificates" list using PowerShell?

Hi, been surfing the web for an example on how to add a certificate to the "global" IIS "Server Certificates" list using PowerShell but to no luck. I already have code in place on how to tie / associate a specific website with a specific cert but not how
to add the new .cer file using the "Complete Certificate Request..." wizard using PowerShell.... I dont expect the final code to become published but if someone had an idea on howto integrate / get an entry point on where to interact between the "Server Certificate"
list in IIS and POSH I would be super happy! :|
I am runnign IIS on a Windows 2008R2 x64 Standard Edition if that helps..... of course, I would saddle for an CLI if there is no other way, but POSH is of course the way to go! :)
Thanks for the help in advance guys, take care!
br4tt3

Hi and thanks for the suggestions!
Although it comes close, the suggested code example points on howto import / incorporate .pfx files - I am getting fed by .cer files which I need to add into the IIS console using POSH.
I tried explore the IIS.CertObj object but was not able to work out if this one could be used for importing / adding .cer files into IIS! However, launching the following command from a POSH console with Import-Module Webadministration already
loaded into that shell;
$certMgr = New-Object -ComObject IIS.CertObj returns the following error message:
New-Object : Cannot load COM type IIS.CertObj
From an IIS perspective I have the following components installed;
[X] Web Server (IIS)                                    Web-Server
    [X] Web Server                                      Web-WebServer
        [ ] Common HTTP Features                        Web-Common-Http
            [ ] Static Content                          Web-Static-Content
            [ ] Default Document                        Web-Default-Doc
            [ ] Directory Browsing                      Web-Dir-Browsing
            [ ] HTTP Errors                             Web-Http-Errors
            [ ] HTTP Redirection                        Web-Http-Redirect
            [ ] WebDAV Publishing                       Web-DAV-Publishing
        [X] Application Development                     Web-App-Dev
            [ ] ASP.NET
Web-Asp-Net
            [X] .NET Extensibility                      Web-Net-Ext
            [ ] ASP
Web-ASP
            [ ] CGI
Web-CGI
            [ ] ISAPI Extensions                        Web-ISAPI-Ext
            [ ] ISAPI Filters                           Web-ISAPI-Filter
            [ ] Server Side Includes                    Web-Includes
        [ ] Health and Diagnostics                      Web-Health
            [ ] HTTP Logging                            Web-Http-Logging
            [ ] Logging Tools                           Web-Log-Libraries
            [ ] Request Monitor                         Web-Request-Monitor
            [ ] Tracing
Web-Http-Tracing
            [ ] Custom Logging                          Web-Custom-Logging
            [ ] ODBC Logging                            Web-ODBC-Logging
        [X] Security
Web-Security
            [ ] Basic Authentication                    Web-Basic-Auth
            [ ] Windows Authentication                  Web-Windows-Auth
            [ ] Digest Authentication                   Web-Digest-Auth
            [ ] Client Certificate Mapping Authentic... Web-Client-Auth
            [ ] IIS Client Certificate Mapping Authe... Web-Cert-Auth
            [ ] URL Authorization                       Web-Url-Auth
            [X] Request Filtering                       Web-Filtering
            [ ] IP and Domain Restrictions              Web-IP-Security
        [ ] Performance                                 Web-Performance
            [ ] Static Content Compression              Web-Stat-Compression
            [ ] Dynamic Content Compression             Web-Dyn-Compression
    [X] Management Tools                                Web-Mgmt-Tools
        [X] IIS Management Console                      Web-Mgmt-Console
        [X] IIS Management Scripts and Tools            Web-Scripting-Tools
        [ ] Management Service                          Web-Mgmt-Service
        [ ] IIS 6 Management Compatibility              Web-Mgmt-Compat
            [ ] IIS 6 Metabase Compatibility            Web-Metabase
            [ ] IIS 6 WMI Compatibility                 Web-WMI
            [ ] IIS 6 Scripting Tools                   Web-Lgcy-Scripting
            [ ] IIS 6 Management Console                Web-Lgcy-Mgmt-Console
    [X] FTP Server                                      Web-Ftp-Server
        [X] FTP Service                                 Web-Ftp-Service
        [X] FTP Extensibility                           Web-Ftp-Ext
    [ ] IIS Hostable Web Core                           Web-WHC
More or less the one thing that I am trying to get up and running is an automated FTPS solution - I just use the IIS console to be able to troubleshoot / compare how things scripted from POSH interacts in the MMC representation. The error I am getting
might be that I am lacking some IIS components to be in place to be able to automate some parts of the IIS - as suggested by the IIS.CertObj object listed in the example..... I will get back if I can track down which component needs to be added to be
able to reference the IIS.CertObj object.
Br4tt3 signing out...
br4tt3

Enable to importing the verify.der file.

Hi gurus,
I need your help in solving some strange behave of the portal, really strange.
I have user Administrator in our production, Im logged in with Administrator account and when i go to irj and then go to System Administration,<h5> System Configuration>Keystore Administration>Content ...Im not able to see the drop down menu with the certificates its saying "Could not access the keystore because of missing permissions. Make sure you have been assigned to the J2EE administrator role." in the alert log of the portal i see this strange error "Full Message Text Source: java.security.
AccessControlException: Access denied (java.lang.RuntimePermission addPermission);
Description: Code permissions for domainhttp://sap.com/irj/servlet_jsp/irj/root/web-inf/portal/portalapps/com.sap.portal.usermanagemen t.admin/private/lib/com.sap.portal.usermanagement.a dmin_core.jar and keystore operation {GET_VIEW TicketKeystore } are not granted;
Consequences: domain http://sap.com/irj/servlet_jsp/irj/root/web-inf/portal/portalapps/com.sap.portal.usermanagemen t.admin/private/lib/com.sap.portal.usermanagement.a dmin_core.jar has not code permission to execute keystore operation {GET_VIEW TicketKeystore }];
Please help me to solve this if you can!!!
Thank in advance !!!

If you are not able to import the verify.der using this irj , You have 2 other options to import it .
1. Login to Visual admin . Go to Server > Services > Key Storage . Under Ticket , There is a Load Option to import the Certs
2. Instead of using /irj use /sso2 .. That will take you to Import Cert page . You can import the cert from there .
Let me know in case of any issues.

Error: SharePoint Workspace encountered an unknown error while attempting to create this list

Hi,
I am using Sharepoint workspace to offline synchronize a document library.
In the workspace, I provided the site name. All but one document library was downloaded.
I selected the document library, which did not get downloaded. I am getting the below message:
SharePoint Workspace encountered an unknown error while attempting to create this list. Ask your site administrator to resolve the issue and then click Resolve Error in the Resolve tab.
If I click on Resolve error, the sharepoint workspace crashes and opens again.
How to fix this?
Thanks

Hi,
For troubleshooting your issue, you can take steps as below:
Running groove.exe /clean from command prompt
Running groove.exe /clean /all from the command prompt
Removing the library from sharepoint workspace and re-adding it
Deleting the users folder from c:\users\username\appdata\local\microsoft\office\groove\user
Running a repair on Office 2010
Uninstalling and reinstalling the Sharepoint Workspace tool from the computer
Verifying all updates are installed
Reference:
https://support.office.com/en-in/article/Resolving-conflicts-and-errors-in-SharePoint-Workspace-70928d16-1cff-4931-b693-f5e346a7bf99?ui=en-US&rs=en-IN&ad=IN#bm1
Best Regards,
Eric
TechNet Community Support
Please remember to mark the replies as answers if they help, and unmark the answers if they provide no help. If you have feedback for TechNet Support, contact
[email protected]

ForbiddenError: The server failed to authenticate the request. Verify that the certificate is valid and is associated with this subscription.

Im trying to connect to my azure subscription via powershell on my machine but keep getting the following error when i run a command:
ForbiddenError: The server failed to authenticate the request. Verify that the certificate is valid and is associated with this subscription.
The steps i have taken so far are:
1. get settings file
Get-AzurePublishSettingsFile
2. Import settings file
Import-AzurePublishSettingsFile -PublishSettingsFile "C:\Users\me\Downloads\credentials.publishsettings"
3. I then run Get-Azuresubscription with the following output:
SubscriptionId : 699385c3-b83a-44af-a651-bxxxxxxxxx
SubscriptionName : Windows Azure MSDN - Visual Studio Premium
Environment : AzureCloud
SupportedModes : AzureServiceManagement
DefaultAccount : 3B68902B5170D5EC91BFCBE4CC27E2A8838F61C4
Accounts : {3B68902B5170D5EC91BFCBE4CC27E2A8838F61C4, 26B118D7F3C598FB8FE9CDC49AB5DE5E450C967C,
03E1E1F0B8C7717F11FB58A14138C35524AB3F8D, 9A2E1FD267ECCC0E9B8C151BD931FC4824E89184...}
IsDefault : True
IsCurrent : True
CurrentStorageAccountName :
TenantId :
I run Get-AzureAccount and get the following:
Id Type Subscriptions Tenants
3B68902B5170D5EC91BFCBE4CC27E2 Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
A8838F61C4
26B118D7F3C598FB8FE9CDC49AB5DE Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
5E450C967C
03E1E1F0B8C7717F11FB58A14138C3 Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
5524AB3F8D
9A2E1FD267ECCC0E9B8C151BD931FC Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
4824E89184
85AD02CB8EB8AB20CF2C44FD9D19F2 Certificate 699385c3-b83a-44af-a651-xxxxxxxxx
9B6BB2FCD2
Finally, when i try to run Get-AzureSQLDatabaseServer, to list my databases, i get this error:
WARNING: Client Session Id: '5911f288-7b02-4c94-bb9d-37b9ea5fc187-2015-01-13 11:47:54Z'
WARNING: Client Request Id: '3e5f7ea9-092a-46fd-a6a6-6916b9161b77-2015-01-13 15:25:41Z'
Get-AzureSqlDatabaseServer : ForbiddenError: The server failed to authenticate the request. Verify that the certificate is valid and is associated
with this subscription.
At line:2 char:1
+ Get-AzureSqlDatabaseServer
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : NotSpecified: (:) [Get-AzureSqlDatabaseServer], CloudException
+ FullyQualifiedErrorId : Microsoft.WindowsAzure.Commands.SqlDatabase.Server.Cmdlet.GetAzureSqlDatabaseServer
I would appreciate any help in figuring out what i am doing wrong here.
Thanks,

OK. That won't work in Azure Automation though, as mentioned above. OrgID (recommended) or cert-based auth will need to be used. PublishSettings file won't work.
Correct, but the original question was:
<Quote>
Im trying to connect to my azure subscription
via powershell on my machine
</Quote>
I wanted to test automation script's core functionality without having to wait for the very very long time taken for an automation runbook
to spin up, actually run and provide output (can often take 2+ minutes for a trivial script). Although i cant run Workbooks on my pc, i can run the core modules (view virtual machines, databases etc) to ensure my logic is sound.

Issue After Rating field is added to the Discussion Board List in SharePoint 2013

Hi ,
We are facing issues After Rating field is added to the Discussion Board List in SharePoint 2013. We are getting below error while adding a new item or editing a new item. Please help on this.
Ashish Kumar Baranwal

Users which were getting issues actually getting below error:
[COMException (0x81020014): One or more field types are not installed properly. Go to the list settings page to delete these fields.<nativehr>0x81020014</nativehr><nativestack></nativestack>]
Microsoft.SharePoint.Library.SPRequestInternalClass.AddOrUpdateItem(String bstrUrl, String bstrListName, Boolean bAdd, Boolean bSystemUpdate, Boolean bPreserveItemVersion, Boolean bPreserveItemUIVersion, Boolean bUpdateNoVersion, Int32& plID,
String& pbstrGuid, Guid pbstrNewDocId, Boolean bHasNewDocId, String bstrVersion, Object& pvarAttachmentNames, Object& pvarAttachmentContents, Object& pvarProperties, Boolean bCheckOut, Boolean bCheckin, Boolean bUnRestrictedUpdateInProgress,
Boolean bMigration, Boolean bPublish, String bstrFileName, ISP2DSafeArrayWriter pListDataValidationCallback, ISP2DSafeArrayWriter pRestrictInsertCallback, ISP2DSafeArrayWriter pUniqueFieldCallback) +0
Microsoft.SharePoint.Library.SPRequest.AddOrUpdateItem(String bstrUrl, String bstrListName, Boolean bAdd, Boolean bSystemUpdate, Boolean bPreserveItemVersion, Boolean bPreserveItemUIVersion, Boolean bUpdateNoVersion, Int32& plID, String&
pbstrGuid, Guid pbstrNewDocId, Boolean bHasNewDocId, String bstrVersion, Object& pvarAttachmentNames, Object& pvarAttachmentContents, Object& pvarProperties, Boolean bCheckOut, Boolean bCheckin, Boolean bUnRestrictedUpdateInProgress, Boolean bMigration,
Boolean bPublish, String bstrFileName, ISP2DSafeArrayWriter pListDataValidationCallback, ISP2DSafeArrayWriter pRestrictInsertCallback, ISP2DSafeArrayWriter pUniqueFieldCallback) +565
[SPException: One or more field types are not installed properly. Go to the list settings page to delete these fields.]
Microsoft.SharePoint.SPGlobal.HandleComException(COMException comEx) +146
Microsoft.SharePoint.Library.SPRequest.AddOrUpdateItem(String bstrUrl, String bstrListName, Boolean bAdd, Boolean bSystemUpdate, Boolean bPreserveItemVersion, Boolean bPreserveItemUIVersion, Boolean bUpdateNoVersion, Int32& plID, String&
pbstrGuid, Guid pbstrNewDocId, Boolean bHasNewDocId, String bstrVersion, Object& pvarAttachmentNames, Object& pvarAttachmentContents, Object& pvarProperties, Boolean bCheckOut, Boolean bCheckin, Boolean bUnRestrictedUpdateInProgress, Boolean bMigration,
Boolean bPublish, String bstrFileName, ISP2DSafeArrayWriter pListDataValidationCallback, ISP2DSafeArrayWriter pRestrictInsertCallback, ISP2DSafeArrayWriter pUniqueFieldCallback) +2336
Ashish Kumar Baranwal

Unmounted External Hard Drive, Error: Filesystem verify or repair failed

Earlier today, I disconnected the external hard drive while it was working.
Now, the External Hard Drive won't even show up on my computer. However, on the Disk Utility it does. I have tried to verify & repair the disk. Plus click the mount button nothing work.
Whenever, I ran the system verify or the repair. I got this error: Error: Filesystem verify or repair failed
Ok. So I have searched all over the internet and forums. Tried everything. Nothing works.
I even tried Disk Warrior. It would work for a while, then when it came to step 8. It would make my computer go black and hold down the power button to restart.
Any suggestions? Please let me know, I would like to recover the files if I can. Thanks.
P.S.Yes I have tried to restart multiple time. I have tried with my USB 2.0, firewire 400, & 800 too.. Nothing.Everyone except the USB shows up in the disk utility but doesn't mount.

I have had the exact same situation occur, but was able to follow these steps to successfully save everything!!
The Unix program "dd" will instruct a drive to stream out all of it's data from beginning to end without regard to file structure, therefore creating an exact block-for-block duplicate. By doing this, it will allow you to copy everything off without having to mount the drive. It also ignores any corruption or physically damaged blocks on the drive which would otherwise crash or freeze the Finder. It saves the data to a disk image file which you can then open and use without fear of imminent failure (the format of the disk image will be the same as the original drive). Now that the data is preserved, you can safely go through and recover your files. Keep in mind that if a file was damaged or corrupted on the drive, it will be unusable, but at least you'll be able to get to the good ones safely. In my case, using "dd", I had no problems and got every file off. If it doesn't work for you, at least it's impossible for just trying it to further damage your files. I can recommend a few other remedies if this doesn't work for you.
Note: The computer must be able to at least recognize the drive. That means either 1) It mounts 2) When you connect the drive the Finder asks if you want to erase or ignore, click ignore and you should be able to do this, or 3) Nothing happens in the Finder, but the volume in question does appear in Disk Utility. If you connect the drive and absolutely nothing happens and it never shows up in Disk Utility, it won't work.
Note: As always, it is suggested that you backup important data on your startup disk before proceeding with stuff like this. It is possible to wipe a drive by mistyping a terminal command, so double check before you hit enter.
_Now, on with the show!_
Prep: Restart your machine so that it goes straight to the login window. Enter your user name and password. As soon as you press enter after your password, immediately hold down the shift key until the Finder finishes loading (this prevents any background startup items from running that might interfere).
1. Attach the drive to the computer and make sure you have another drive with enough free space to hold the entire capacity of the bad drive, not just it's used space, but the WHOLE size of the bad drive (for exception, see very bottom of this post).
2. In Terminal, type:
+diskutil list+
Look for the drive you want to recover in the "name" column, then write down it's "identifier" (ex. disk1s2)
3. In Terminal, type:
+dd bs=512 if=/dev/disk#s# of=/my_directory/image.dmg conv=noerror,sync+
!! Replace "disk#s#" with the identifier you wrote down before !!
!! Replace "/my_directory/" with the path to where you want to save !!
!! Replace "image.dmg" with the name you want to give the disk image (must end with .dmg) !!
4. To confirm that something is happening, open Activity Monitor (in the Utilities folder) and click "Disk Activity". Once you determine an average transfer rate, divide the size of the drive by that and then divide by 60 to see how many minutes it will take to finish. *+! ! FOR LARGE DRIVES THIS WILL TAKE A VERY LONG TIME ! !+* To be safe, do not use your computer for anything until the process finishes, you can leave Activity Monitor open so you can see when it's finished.
If you're only really concerned about a certain files and you know their exact path on the bad drive, let me know and I can give you modified instructions to copy just those files, saving the time and space of doing the whole drive.

PEM or DER Format certificate chain

I have installe an ISE 1.2.0.899. It is used for Guest Services only, the customer require all its employees be able to access the sponsor portal and validated their credentials using LDAPS. Not LDAP, not AD feature in ISE. The problem is because in order to enable LDAPS I must upload to ISE the root CA certificate, the customer is not providing the root CA certificate for security reasons (?); they said the certificate chain should be enough. Even the ISE user guide indicates root CA or certificate chain. So, the customer downloaded the certificate chain from its PKI (Microsoft 2008) and give it to me, but it is in .p7b (PKCS#7) format (they said there is no choice to select another format). This format is not supported by ISE, so I needed to use third party tools to convert the file (www.sslshopper.com and openssl). It appears the convertion is successfull but when I try to upload on ISE Certificate Store always I get the same errror: "Unable to read certificate file - please be sure file is in PEM or DER format".
So the questions are:
1. Is the file provided by the PKI in p7b format always?
2. What should be the most proper way to convert the file to something the ISE can understand?
3. Should be the root CA certificate a vey best option?
Even the conversion problems indicated above, I tried to open and convert the file using the mmc. I know the certificate chain has three files, I recovered them and uploaded to ISE. Whit two of these three files selected on LDAPS security configuration I can run the "Test bind to Server" successfully but everytime an user try with its own credentials always the access is denied with "invalid username or password" error.
Locking in the ISE log I found this messages:
ERROR,0x2b263618c940,LdapSslConnectionContext::checkCryptoResult(id = 634): error message = SSL alert: code=0x230=560 ; source=local ; type=fatal ; message="Unknown CA - error unable to get issuer certificate locally",LdapSslConnectionContext.cpp:226
ERROR,0x2b263618c940,LdapConnectionBindingState::onInput(id = 634): bind ended with an error: 117,LdapConnectionStates.cpp:396
631,WARN ,0x2b263618c940,NIL-CONTEXT,Crypto::Result=1, Crypto.SSLConnection.pvClientInfoCB - Alert raised: code=0x230=560, where=0x4008=16392, source=local,SSLConnection.cpp:2765
WARN ,0x2b263618c940,NIL-CONTEXT,Crypto::Result=102, Crypto.SSLConnection.writeData - failed write the data,SSLConnection.cpp:970
ERROR,0x2b263618c940,LdapSslConnectionContext::checkCryptoResult(id = 634): crypto result = 102,LdapSslConnectionContext.cpp:202
ERROR,0x2b263618c940,cntx=0000005789,user=tmxedscalcan,LdapServer::onAcquireConnectionResponse: failed to acquire connection,LdapServer.cpp:461
ERROR,0x2b263436e940,NIL-CONTEXT,[ActiveDirectoryClient::openCdcConnection] Can't open CDC session due to error 32: ADClient is not running,ActiveDirectoryClient.cpp:1328
ERROR,0x2b263436e940,NIL-CONTEXT,[ActiveDirectoryClient::connectClient] AD CDC client connection failed!,ActiveDirectoryClient.cpp:117
ERROR,0x2b263436e940,NIL-CONTEXT,ActiveDirectoryIDStore::performConnection - Connecting client failed,ActiveDirectoryIDStore.cpp:608
I don't have idea what do they mean.
Someone told me the convertion made with mmc on my pc was an error and I need to repeat the same process using administrative tools on a server
I'm really confused and I don't know how continue with a troubleshoot process.
How can I know the original file is correct?
How can I know the conversion is correct?
As the original chain includes three certificates, I should upload them to ISE separately or as one file?
Attached is the Sponsor policy screenshoot. I have two rules with the same conditions one por AD (just for test), one for LDAPS.
I will appreciate your help
Regards.
Daniel Escalante

Hi,
If you open the .p7b file on a Windows machine. (Open not install)
Go to the Certification Path and click on the root certificate, click View Certificate.
Now you have the root certificate.
Go to Details and click Copy to File. This give you the option to exprot the root cert.
Click next, here you can select to save as Base-64 encoded (DER) that you can import in ISE.
Click next and save. Then try to import under Server certifiactes on ISE
You can do this for sub-CA cert in the chain as well.
HTH

Error when trying to change CC list of email item in SP 2010 workflow

When I tried to change the CC list of an email in a workflow that involved removing a few email ids and adding another id to the list, on publishing it I get the following error :
(0, 0) Activity 'ID3737' validation failed: Path resolved to Referenced activity Property 'ReturnValue' whose PropertyType 'Microsoft.SharePoint.Workflow.SPItemKey' does not match with the Target Type 'System.Int32'.)
(0, 0) Activity 'ID3732' validation failed: Path resolved to Referenced activity Property 'ReturnValue' whose PropertyType 'Microsoft.SharePoint.Workflow.SPItemKey' does not match with the Target Type 'System.Int32'.)
The workflow was originally created in SharePoint 2007 and later migrated to SharePoint 2010. Also the newly added id is listed by the account name instead of the email address similar to the existing email-ids.
Can someone please shed some light on what the error means and why I am encountering this particular error?

Hi,
Pls check this link
https://support.office.com/en-us/article/Troubleshoot-workflow-errors-8fcf47e5-a410-4714-880b-2611b18a56ce#bm6
<section class="ocpSection" style="color:#363636;font-family:'Segoe UI', 'Segoe UI Web Regular', 'Segoe UI Symbol', 'Helvetica Neue', 'BBAlpha Sans', 'S60 Sans', Arial, sans-serif;font-size:10px;line-height:normal;">
Cause
One or more actions used in the workflow reference assemblies are not listed in the safe list in the web.config file.
One or more actions used in the workflow reference assemblies are listed as unsafe in the safe list in the web.config file.
</section><section class="ocpSection" style="color:#363636;font-family:'Segoe UI', 'Segoe UI Web Regular', 'Segoe UI Symbol', 'Helvetica Neue', 'BBAlpha Sans', 'S60 Sans', Arial, sans-serif;font-size:10px;line-height:normal;">
</section>
Please remember to click 'Mark as Answer' on the answer if it helps you

Downloading verify.der in NW CE7.1

Hi All,
Can someone tell me where to download the verify.der or equivalent for Netweaver CE 7.1 so I can setup a trust relationship between it and a NW 7.0 Portal?
I know how to obtain the NW7.0 certificate and import into NW CE 7.1, but I can't see where to download the 7.1 cert to import into 7.0.
Cheers,
Steve

Hi Steve, please see SAP note 958183

Cisco CA + Cisco VPN Client - Error 42: Unable to create certificate enrolment request

We find ourselves in a difficult situation with the
Cisco VPN Cleint version 5.0.07.0290 where it keeps giving us an
"Error 42: Unable to create certificate enrolment request" when we attempt to use the Online enrolment method to create and enrol a new certificate.
There is no additional information in the VPN client logs where we have set 3-High for all logs.
In addition, Wireshark does not show any packets sent from the machine running the client to the Cisco 3825 router which runs the Cisco CA.
To create and enrol a certificate we do the following:
1. Click on the Enroll button to show the Certificate Enrolment dialog
2. Select Online
3. Select <New> for Certificate Authority
4. Enter http://192.168.120.1 as CA URL (note, 192.168.120.1 is the IP of the Cisco 3825)
5. Click Next to display the dialog where we can enter certificate details
6. Enter details in all fileds except IP Address and Domain
7. Click Enroll which shows a dilaog with the Error 42 ... message in it.
If we attempt to create a request by using the File method, all works fine, that is, the client creates a file with the enrolment request.
The fact that the client does not send any messages to the Cisco CA leads us to belive that we have a pronblem on the clinet machine. However, the client does not write any information in the logs, so it is a bit hard to fix the problem.
We will be grateful for any assistance that you can provide with this issue. I can provide additional configuration information if required for both the client and the Cisco CA. Note that we have not modified any client configuration. Basically, we installed the clinet on a Windows 7 64bit machine and attempted the steps listed above.
Thank you
Emil

FYI, I just came up against this problem and the solution in my instance was to ensure that the Cisco CA Server was configured to automatically grant certificate requests.
Cisco2691#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Cisco2691(config)#crypto pki server CERTSERVER
Cisco2691(cs-server)#grant ?
auto Automatically grant incoming SCEP enrollment requests
none Automatically reject any incoming SCEP enrollment request
ra-auto Automatically grant RA-authorized incoming SCEP enrollment request
Cisco2691(cs-server)#grant auto
% The CS config is locked. You need to shut the server off before changing its configuration.
Cisco2691(cs-server)#shut
Cisco2691(cs-server)#grant auto
Cisco2691(cs-server)#
Mar 25 19:39:53.356: %PKI-6-CS_GRANT_AUTO: All enrollment requests will be automatically granted.
Cisco2691(cs-server)#no shut
% Certificate Server enabled.

There was an error retrieving the user management project list

Hi All
I created the application profile successfully and try to create the new application but the error message was displayed like " *There was an error retrieving the user management project list . please verify that a project exists"* i didn't give the domain name, i went admin login......
Regards By
Nagaraj

Hi Varun,
i started services correct order only, but i am using VMware
Regards
Nagarajan

Error adding verify.der to certificate list

Similar Messages

Maybe you are looking for