After the release of SIF 2.0.0, an automated SC 9.0.x script began failing with the error:
The operation is on user root store and UI is not allowed.
This error occurs during the execution of
xconnect-createcert.json, which is included in the SC On-Prem WDP package > Configuration Files zip.
xconnect-createcert.json, I noticed that it specifies
CurrentUser as the Store Location for the cert.
My script runs as the
System user account as part of the DSC (Desired State Configuration) execution on a VM created via an Azure ARM template.
If I explicitly request SIF 1.2.1, the certificate is installed properly. Strangely, with 1.2.1, the cert is installed in the
LocalMachine store. I suspect SIF 1.2.1 has some additional code to ensure this Store Location is used.