3 added 8 characters in body
source | link

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config

C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

  • C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config
  • C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json
  • C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json
  • C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json
  • C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check the app pool, by default it should have the identity "{MachineName}\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in {YourCommerceInstallFolder}\SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config

C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check the app pool, by default it should have the identity "{MachineName}\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in {YourCommerceInstallFolder}\SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

  • C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config
  • C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json
  • C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json
  • C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json
  • C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check the app pool, by default it should have the identity "{MachineName}\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in {YourCommerceInstallFolder}\SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).

    Bounty Ended with 250 reputation awarded by Matthew Dresser
2 added 2 characters in body
source | link

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config

C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check Check the app pool, by default it should have the identity "\CSFndRuntimeUser""{MachineName}\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in \SIF{YourCommerceInstallFolder}\SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config

C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check the app pool, by default it should have the identity "\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in \SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config

C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check the app pool, by default it should have the identity "{MachineName}\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in {YourCommerceInstallFolder}\SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).

1
source | link

If you are receiving this error it means you either have the wrong certificate's thumbprint referenced in your configs (or the thumbprints are not all the same), or the user account of the IIS AppPool used for the commerce services does not have correct access to the certificates.

How to check you are using the right thumbprint:

The certificate/thumbprint in question is the one you should have generated in step 2.3 of http://commercesdn.sitecore.net/SitecoreXC_9.0/Installation-Guide/9.0.3/Sitecore_Experience_Commerce_Installation_Guide_for_On-Premise_9.0.3.pdf

This certificate should not be used with any site bindings in IIS. The thumbprint value needs to be referenced in the following files:

C:\inetpub\wwwroot\sitecore9site\App_Config\Include\Y.Commerce.Engine\Sitecore.Commerce.Engine.Connect.config

C:\inetpub\wwwroot\CommerceAuthoring_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceMinions_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceOps_Sc9\wwwroot\config.json C:\inetpub\wwwroot\CommerceShops_Sc9\wwwroot\config.json

How to check the IIS AppPool account access:

Check the site CommerceAuthoring_Sc9. By default it should have an app pool called CommerceAuthoring_Sc9. Check the app pool, by default it should have the identity "\CSFndRuntimeUser".

For completeness check CommerceMinions_Sc9, CommerceOps_Sc9, CommerceShops_Sc9; they should all have the same app pool identity.

Now open MMC. Open Certificates (Local Computer)\Personal\Certificates and locate the certificate. Double-check its thumbprint.

With the certificate selected, in the "Actions" pane, click "More Actions" > "All Tasks" > "Manage Private Keys...". In the security dialog, you should see that "CSFndRuntimeUser" has "Full control" and "Read" access, if not, try to add the account and select those permissions.

With these changes made, you can re-run the installation (you can comment-out previous successful steps in \SIF.Sitecore.Commerce.1.4.7\Configuration\Commerce\Master_SingleServer.json to skip repeating steps which have already been completed).