Keychain not generating keys for email certificates

In trying to set up email signing for two different machines I ran into a problem when adding email authentication certificates from Comodo. After downloading the .p7s files each of the users double clicked the files, adding them to their key chains. However, when they opened Mail there were no options for adding the lock(encrypt) and star(digitally sign) icons to their 'compose new message' windows.
After a lot of screwing around, I discovered that the new certificates had been added, but just as regular certificates and never made it to the 'My certificates' section. After some more comparisons I discovered that the private keys had not been generated automatically when the keys were added. The solution was to send the origional files to a machine that was generating keys, add them to that machine's keychain and then export the certificates (this time with a .p12 extention) and re-import the keys back to the owners machines.
That's a pain. Anyone seen this before? Have a better fix?
Configs as follows
Working configuration (generates keys)
iMac 27" 3.4ghz Intel core i7
Mac os 10.7.2
keychain 5.0
Broken configurations (not generating keys)
Mac Mini 2.66 intell core duo
Mac os 10.7.2
keychain 5.0

Hi Jack,
Open Keychain Access in Utilities, use Keychain First Aid under the Keychain Menu item, then either check the Password under that item, change it, or delete it and start over.
Resetting your keychain in Mac OS X...
If Keychain First Aid finds an issue that it cannot repair, or if you do not know your keychain password, you may need to reset your keychain.
http://support.apple.com/kb/TS1544

Similar Messages

Generating CSRs for SSL Certificates

Hi all,
I am trying to generate CSRs for SSL Certificates, in order to set up a secure (https) dynamic dns connection to my router.
I am supposed to access to the following directory through the Terminal:
cd /usr/local/ssl/private
But all I can access is /usr, I cannot go any further. I always get the message "/local: No such file or directory." Even if I am logged as root.
I might be making some mistakes, but I do not understand what is going on.
Thanks
Enrique

The error message you posted says there is no "/local" which is true.
There is a "/usr/local"
If you are cd'ing one directory at a time, don't lead them with a /
For example:
cd /usr
cd /local
Will give you the error you describe
cd /usr
cd local
Will put you into /usr/local
If this doesn't solve your issue, please post the exact steps you are taking.
Jeff

RDS Gateway 2012, RemoteApp Displays "A Revocation check could not be performed for the Certificate" via RDWEB

I have searched through the forums and there are a number of posts that are similar but all the checks they list seem to not apply to this one.
My current setup is as follows
All Servers are 2012 R2
1 x DC server
1 x RDS Gateway server with RDS Web installed
1 x Session Host Server
Certificate supplied by godaddy with 5 names. (included is the name of the RDS Gateway/Web server in the certificate, the internal name of the session host server is not included as the internal names are differnet to the external)
My tests are as follows
Navigating to the RDSWEB page from a machine inside the same network (windows 7 sp1) but not on the same domain is fine no errors and logging in and launching any published application is fine with no errors.
However logging in on another machine that is external from the network (windows 7 sp1) is ok up to the point of launching any of the published apps I get the error about ""A Revocation check could not be performed for the Certificate". this
prompts twice but does allow you to continue and login and use the app till the next time. If I view the certificate from the warning message all appears to be ok with all certs in the chain.
I have imported the root and intermediate certs to each of the gateway/rdsweb server and session host server into the computer cert store just to be on the safe side. This has not helped, I have also run the following command from both windows 7 machines
with no errors on either
certutil -f –urlfetch -verify c:\export.cer
I cant seem to see where this is failing and I am beginning to think there is something wrong with godaddy cert itself somehow.
If I skip rdsweb and just use MSTSC with the gateway server settings then I can login to any machine on the network with no errors so this is only related to launching published apps on the 2012 R2 RDWEB or session host servers.
Any help appreciated

Hi,
1. Please make sure the client PCs have mstsc.exe (6.3.9600) installed.
2. If you are seeing a name mismatch error, you can set the published name via this cmdlet:
Change published FQDN for Server 2012 or 2012 R2 RDS Deployment
http://gallery.technet.microsoft.com/Change-published-FQDN-for-2a029b80
To be clear, the above cmdlet changes the name that shows up next to Remote computer on the prompt you see when launching a RemoteApp. You should have a DNS A record on your internal network pointing to the private ip address of your RDCB server.
Additionally, in RD Gateway Manager, Properties of your RD RAP, Network Resource tab, you should select Allow users to connect to any network resource or if you choose to use RD Gateway Managed group you will need to add all of the appropriate names to the
group.
For example, when launching a RemoteApp you would see something like Remote computer: rdcb.domain.com and Gateway server: gateway.domain.com . Both of these names need to be on your GoDaddy certificate.
Please verify the above and reply back so that we may assist you further if needed. It is possible you have an issue with the revocation check but I would like you to make sure that the above is in place first.
Thanks.
-TP
Thanks for the response.
To be clear I am only seeing a name mismatch and revocation error if I assign a self signed cert to the session host as advised earlier in the thread by "Dharmesh Solanki", if I remove this and assign the 3rd party certificate I then
just get the revocation error , I have already ran the powershell to change the FQDN's but this has not resolved the issue although the RDP connection details now match the external url for RDWEB when looking at one of the remoteapp files. The workspace
ID still shows an internal name though inside this same file.
RD Gateway is already set to connect any resource, when connecting using remote app both names (RDCB/RDGateway) show as being correct and are contained within the same UCC certificate. I also already have a DNS entry for the Connection broker pointing to
the internal ip.
Do you know if the I need the internal name of the session host servers contained within the same UCC certificate seeing as they are different fqdn's than what I am using for external access ? I resigned the UCC certificate and included the internal name
of the session host server to see if this would help but for some reason I am still seeing the revocation error. I will check on a windows 8 client pc this evening to see if this gets any further as the majority of the testing has been done on windows 7 sp1
client pc's
Thanks

LabVIEW could not generate code for the shared variable.You must open the VI in the project that contains the library where the shared variable resides

HI
When I put a network shared variable with fifo RT activated on my diagram, the arrow is broken.and I' ve got this message:
""LabVIEW could not generate code for the shared variable.You must open the VI in the project that contains the library where the shared variable resides""
If I uncheck FIFO RT option for this variable the arrow isn't broken anymore.
I 've no idea how to correct this weird error?
Autodeploy is on, and I've check copy / delete in diagram in tool/options\diagram
regards,
james

Hello,
I don't reproduce this error.
Could you send your VI?
Regards
VéroniqueD
NI France

Imovie is not generating thumbnails for MPG video files

Hi everyone,
I have what I hope is a quick question with an easy solution. I'm using iMovie '09 8.0.6 to make a movie for my parents of their granddaughter. Imovie has generated thumbnails for all my video in iPhoto (most of which is .mov format), but two short clips (about a minute in length each) were apparently taken with a different camera and are in .mpg format. For some reason, imovie is not generating thumbnails for these .mpg videos, though in the past I have never experienced a problem here. What is wrong? What can I do to get these clips into iMovie or have iMovie generate these thumbnails?
Thanks.

No, the orientation is not the issue, The first set of 4 imported videos were from a GoPro 3 camera, and the one that was lost doing an "update thumbnail" operation was also a GoPro3 fie.
Just now I did another experiment, I chose to update thumbnail from a video file created with my Pentax WG-3 and it worked.
I updated thumbnail on a horizontal and verticle video from my Galaxy S3, and now those are also gone with no thumbnail...
So far the only one that actually works for me is the Pentax video, which is a MOV file. , the GoPro 3 and Galaxy are mp4 files, so it's possible that the mp4 format has something to do with it. This is very frustrating losing my thumbnails like this.... Luckily I have not deleted ver11 yet.
I hope they repair this issue soon.
Thanks for the help so far,

My iPhones email app is not checking automatically for emails, only when I open it.. How to fix?

My iPhones email app is not checking automatically for emails, only when I open it.. How to fix?

Settings > Mail, Contacts, Calendars > Fetch New Data > On
then scroll down to bottom of that page to check whether you want to fetch email:
every 15 minutes
every 30 minutes
hourly
manually

Error Message: Can not generate mask for the LMB peripherals

I've added a bunch of perhipherals to my microblaze project and used the Generate Addresses button. I get the below error messges when I try to generate a net list. ERROR:EDK:3193 - issued from TCL procedure
   "::hw_lmb_bram_if_cntlr_v2_10_b::update_syslevel_mask" line 88
    C_MASK (IPNAME:lmb_bram_if_cntlr, INSTANCE:ilmb_cntlr) - Can not generate
   mask for the LMB peripherals! An address decode mask is assigned to all LMB
   peripherals connected to the MicroBlaze processor. The address decode mask is
   based on a set of decode bits that distinguish the LMB address space from the
   OPB/PLB address space. The error message indicates that a set of decode bits
   can not be found to generate a mask. Please modify the address map of the
   slaves connected to OPB/PLB to use a common address bit.
ERROR:EDK:1585 - IPNAME:lmb_bram_if_cntlr INSTANCE:ilmb_cntlr -
   E:\Xilinx\11.1\EDK\hw\XilinxProcessorIPLib\pcores\lmb_bram_if_cntlr_v2_10_b\d
   ata\lmb_bram_if_cntlr_v2_1_0.mpd line 77 - error computing override value for
   C_MASK using tcl
ERROR:EDK:3193 - issued from TCL procedure
   "::hw_lmb_bram_if_cntlr_v2_10_b::update_syslevel_mask" line 88
    C_MASK (IPNAME:lmb_bram_if_cntlr, INSTANCE:dlmb_cntlr) - Can not generate
   mask for the LMB peripherals! An address decode mask is assigned to all LMB
   peripherals connected to the MicroBlaze processor. The address decode mask is
   based on a set of decode bits that distinguish the LMB address space from the
   OPB/PLB address space. The error message indicates that a set of decode bits
   can not be found to generate a mask. Please modify the address map of the
   slaves connected to OPB/PLB to use a common address bit.
ERROR:EDK:1585 - IPNAME:lmb_bram_if_cntlr INSTANCE:dlmb_cntlr -
   E:\Xilinx\11.1\EDK\hw\XilinxProcessorIPLib\pcores\lmb_bram_if_cntlr_v2_10_b\d
   ata\lmb_bram_if_cntlr_v2_1_0.mpd line 77 - error computing override value for
   C_MASK using tcl I understand its complaining about the mask values, but I'm not exactly sure why. Here is the address map it shows:Address Map for Processor microblaze_0
(0000000000-0x00003fff) dlmb_cntlr    dlmb
(0000000000-0x00003fff) ilmb_cntlr    ilmb
(0x81800000-0x8180ffff) xps_intc_0    mb_plb
(0x81c00000-0x81c0ffff) xps_ll_temac_0    mb_plb
(0x83400000-0x8340ffff) Generic_SPI    mb_plb
(0x83c00000-0x83c0ffff) xps_timer_0    mb_plb
(0x84000000-0x8400ffff) RS232    mb_plb
(0x84400000-0x8440ffff) mdm_0    mb_plb
(0x8c000000-0x8fffffff) mpmc_0    mb_plb
(0xfffff000-0xffffffff) xps_gpio_0    mb_plb Any thoughts? I was unable to find another instance of this error message.

Version 11.3 I actually figured it out, its rather odd that the generate addresses button doesn't do this automatically. It appears that the mask was set to trigger use of the cache on a single bit. 0x00800000. I had enough devices added where automatic address generation was using the most significant bit meaning that bit was falling within other address spaces. I changed it to 0xFFFFC000. (Basically telling it to match addresses if all address signals above 16KB are zero). I don't know if that is the proper way to do it, but it accepted it. Now I'm fighting with some stuff regarding an FSL bus I added that apparently isn't quite properly setup, so I haven't found out yet if the processor likes that address mask. But the tools appear to like it.

Not generating IDOC for payment Advice to Vendors

Hi,
IDOC was getting generated before one month but now SAP system has stopped generating IDOC for vendor Payment advice. This problem is with all the vendors.
After execution of t-c-ode F110, payment document is successfully created, but IDOC is not geenerated. There is no log about "IDOC not getting generated"
Checked Table REGUH, IDOC number is displayed as 0000000000000.
This was happening perfectly one month back.
There is no change in Vendor master data, IDOC number range is available.
There is no posting of IDOC in table DFKKTHP and checked Report REREMITADV for which there is no data.
Waiting for your valuable responses.
Regards
veleyudham

Hi,
First check certain customization:-
(1) FBZP setup for payment method at country level. Whether IDOC generation program is assigned or not.
(2) Then check the variant of RFFOEDI1 in the printout tab of F110. Is the selection creteria OK?
(3) Check the partner profile in WE20 for the bank.
Then run the program RFFOEDI1 in SE38 for your payment run and check the output.
You can also get this program debugged from you ABAPer to have root cause analysis.
Regards,
Gaurav

SCOM does not generate alert for logical disk space

Hi,
Today we noticed that one of agent in SCOM has drive space below 5% and 500 MB but SCOM did not generate any alert.
I have also verified that there is no override set for this agent's logical disks. I have also verified that discovery is able to discover all disks on server but monitoring is not working as expected.
I have flushed health service on agent but it didn't help.
When I gone through event logs on agent, I found below events:
Log Name:      Operations Manager
Source:        HealthService
Date:          5/26/2014 5:13:05 AM
Event ID:      1103
Description:
Summary: 6 rule(s)/monitor(s) failed and got unloaded, 1 of them reached the failure limit that prevents automatic reload. Management group "XXXXXXXX".
This is summary only event, please see other events with descriptions of unloaded rule(s)/monitor(s).
Log Name:      Operations Manager
Source:        HealthService
Date:          5/26/2014 5:14:21 AM
Event ID:      1206
Task Category: Health Service
Description:
Rule/Monitor "Microsoft.Windows.Server.2008.LogicalDisk.FreeSpace", running for instance "F:" with id:"{36ED7395-3798-A361-5017-327F6FA50030}" failed,
got unloaded and reached the failure limit that prevents automatic reload. Management group "XXXXXXXXX".
Please let me if what we need to do here.
Thanks.

Do this
Change startup type to Window Management Instrumentation (WMI) Service to disabled
Stop the WMI Service; you may need to stop IP Helper Service first or other dependent services before it allows you to stop WMI Service
Rename the repository folder: C:\WINDOWS\system32\wbem\Repository to Repository.old
Open a CMD Prompt with elevated privileges
CD windows\system32\wbem
for /f %%s in ('dir /b /s *.dll') do regsvr32 /s %%s
Set the WMI Service type back to Automatic and start WMI Service
cd /d c:\ ((go to the root of the c drive, this is important))
for /f %%s in ('dir /s /b *.mof *.mfl') do mofcomp %%s
Reboot the server
Blog: http://theinfraguys.com
Follow me at Facebook
The Infra Guys Facebook Page
Please remember to click Mark as Answer on the answer if it helps you in anyway

How to generate keys for the records

Hi Gurus,
can anybody explain me how to create keys for the recors while working with keymapping.
Regards
Ravikumar

Hi Yugandher,
Is your Question pertaining to Key generation in MDM or using the Remote key for importing and syndication in MDM?
Remote Keys are system specific uniques maintained in MDM while importing source records from different source system.You need to Enable key mapping in Console and then map the <Remote key> field to the unique key in Import manager and do similar mapping in syndicator as well.
You can view the key mapping for differnt records under the Edit key mapping (context menu) right clicking on any record.
To know more on this refer the below link:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/7051c376-f939-2b10-7da1-c4f8f9eecc8c (Key mapping)
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/30843106-5539-2b10-75a9-da483911b0d9 (Key mapping)
For Key generation in MDM you can use the Qualified range property of Remote system in Console for Key genearation.However these keys will be genearted only after syndication and are created and assigned within MDM and not maintained from any source remote system.
Hope It Helped
Thanks & Regards
Simona Pinto

Generating Key for new installation

Hi,
I installing IDES , I am trying to generate key. the FYI steps i have involved
goto SMSY>select other object>generate key==yes got the key
When i entered the generated key from solution manager
The system does not accepts.
The error message read as<b>"HOST directory to central instance and system ID incorrect"
Please help tell me basic requiremnts or procedures to follow.
REGARDS,
PAUL

Hello Paul,
Kindly follow the steps mentioned in the below link to generate the key...
http://help.sap.com/saphelp_sm40/helpdata/en/45/51fbdbd4941803e10000000a1553f7/frameset.htm
regards,
Anand

Do not have key for Power Switch

Hi,
I did not receive a Key for the used Sun Server I brought. Before I go back & ask the dealer about it jus for my information.
- How important is the key specifically while turning off the power?
- Is it Unique for each box ?
- Can I purchase or get the key from somewhere else if didnt receive
- Any where else this may affect me?
Please advice
Thanks
Sacrh

Hi Harold,
Thanks very much for the details.
Its E420R Server.
Based on the URL here are the details of the key.
PRODUCT : E420R
AC POWER KEY : 250-1317
POWER INTERLOCK KEY : NONE
DOOR KEY : 250-1317
Is the key for all E420R servers same? Offcourse I will be in more trouble without that.
Hope I will find it somewhere. Any other suggestions. How much safe it is to shutdown the server by keeping the power key pressed for 5 secs all the time.
!Thanks
Sacrh

Not Generating Spool for my user id

Initially when i run the transaction CO02 and printing the production order, spool was generating properly. so in next day due to some issues i changed the print program or adobe form then spool was not generating to my user id only, if i print with any other user id i am able to see the spool , so what is the problem for my user id, could any one help in this scenario.

Hi,
Adding to Ashwin's point there can be another possibility, go to tcode SU3 and in Defeaults tab check and compare the Spool control Section between your login and the other user login.
Check if the check box 'Output immediatly' is selected or not.

Keychain will NOT accept password for email

My wife had a problem w/ her email program, Entourage. After finally getting things squared away, noy she has to enter her password everytime. Keychain won't accept it. I check the box "save password" but it doesn't. Any suggestions?
Thanks, Jack
iMac, OS 10.5.8, etc

Hi Jack,
Open Keychain Access in Utilities, use Keychain First Aid under the Keychain Menu item, then either check the Password under that item, change it, or delete it and start over.
Resetting your keychain in Mac OS X...
If Keychain First Aid finds an issue that it cannot repair, or if you do not know your keychain password, you may need to reset your keychain.
http://support.apple.com/kb/TS1544

Keychain not storing password for mail in user account

I set up another user account on my new macbook pro so my wife could check her email in apple mail. but every time she signs on and opens mail, it tells her to enter her password. I've tried everything, including deleting the email accounts and setting them up again. it's HIGHLY HIGHLY annoying. it doesn't happen in my account, only in her user account. how do i fix this??

Basically, the fix is to put all your mail passwords in a separate, always-unlocked keychain.
Here is how to do this:
1) Open keychain access, go to File -> New Keychain. I named mine Mail. Save it in your keychains folder (default), and give it a password.
2) Right click the new keychain and select "Change Settings for Keychain". Here, uncheck the "Lock after" and the "Lock when sleeping". The latter can be left on if you don't mind re-typing your password every time your computer goes to sleep (can also be more secure if you don't lock your whole machine when sleeping).
3) Here is the tricky part: you need to find all your mail keys and drag them into the new keychain. Do a search for your mail host or your login username and you might see a list of keys. It will be flagged as an "Internet password", not web form, and when you click on it it should read "imap://your.web.host.tld/" or pop if you use that, and "smtp://your.web.host.tld/" for your outgoing mail. Just drag them all into your Mail keychain, type in your password and click Accept. The keys will stay on the search screen, but clicking on the Mail keychain will confirm that they are in fact moved.
4) Now lock your primary keychain (the one in bold) and run a test by checking your mail. If no dialog pops up asking for your keychain password then it was a success!

Keychain not generating keys for email certificates

Similar Messages

Maybe you are looking for