Solved

makecert error when creating service certificate

Posted on 2013-06-27
2
2,086 Views
Last Modified: 2013-06-29
I am attempting to configure a Microsoft Dynamics NAV 2013 Service Tier Server to accept the NAVUserPassword ClientServicesCredentialType.  It is a development environment and those that access the server will be in a different untrusted domain.

I have been happily following a blog related to the subject and using makecert to create the certificates.  Here are my steps:

Create and import via mmc the root certificate
makecert -n "CN=RootEW7DevServiceCA" -r -sv RootEW7DevServiceCA.pvk RootEW7DevServiceCA.cer

Create and import via mmc the revocation certificate
makecert -crl -n "CN=RootEW7DevServiceCA" -r -sv RootEW7DevServiceCA.pvk RootEW7DevServiceCA.crl

When I try this final step...

makecert -sk EW7DevSerivce -iv RootEW7DevServiceCA.pvk -n "CN=EW7DevSerivce" -ic RootEW7DevServiceCA.cer -sr localmachine -ss my -sky exchange -pe EW7DevSerivce.cer

makecert throws the following error:
Error: Can't create the key of the subject ('EW7DevService')
Failed

I've diddled with permissions on
C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys
and I think they are correct.  Local Administrators (I am one) and Everyone with "Special" permissions.

I'm stumped - anybody got any ideas?
0
Comment
Question by:tarkmyler
2 Comments
 
LVL 61

Accepted Solution

by:
btan earned 500 total points
ID: 39285939
See if this helps - mentioned -sr CurrentUser

http://nerdwords.blogspot.sg/2008/01/makecertexe-error-can-create-key-of.html

if you are creating a root certificate, you should add -cy authority parameter

another simpler for info
http://blogs.technet.com/b/jhoward/archive/2005/02/02/365323.aspx

btw, I do see typo e.g. EW7DevSerivce instead of EW7DevService though it should not matter
0
 

Author Comment

by:tarkmyler
ID: 39287247
Oh boy howdy.  That dyslexic streak lifted its ugly head again.  I Changed Serivce to Service and the makecert command succeeded.  Thank you!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Cybersecurity has become the buzzword of recent years and years to come. The inventions of cloud infrastructure and the Internet of Things has made us question our online safety. Let us explore how cloud- enabled cybersecurity can help us with our b…
As a financial services provider, your business is impacted by two of the strictest federal regulations on record: the Sarbanes-Oxley Act and the Gramm-Leach-Bliley Act. Correctly implementing faxing into your organization to provide secure, real-ti…
This video discusses moving either the default database or any database to a new volume.
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now