-2

Can you please let me know whats causing this issue while running Installation script.

Install-SitecoreConfiguration : Cannot validate argument on parameter 'Signer'. The "$_.HasPrivateKey -eq $true" validation script for the argument with value "[Subject]***
  CN=DO_NOT_TRUST_SIF121Root, O=DO_NOT_TRUST, OU=Created by https://www.sitecore.com
[Issuer]
  CN=DO_NOT_TRUST_SIF121Root, O=DO_NOT_TRUST, OU=Created by https://www.sitecore.com
[Serial Number]
  298C4954C51E98AB4FB6C15C08E063BF
[Not Before]
  22/12/2018 18:52:58
[Not After]
  20/12/2028 18:52:58
[Thumbprint]
  D2108132587A8EEB7E271FE648AB2FEFDB490B7A
" did not return a result of True. Determine why the validation script failed, and then try the command again.
At C:\Sitecore\Install\InstallV9.ps1:19 char:1
+ Install-SitecoreConfiguration @certParams -Verbose
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-SitecoreConfiguration

[TIME] 00:00:04
***Invoke-NewSignedCertificateTask : Cannot validate argument on parameter 'Signer'.*** The "$_.HasPrivateKey -eq $true" validation script for the argument with value "[Subject]
  CN=DO_NOT_TRUST_SIF121Root, O=DO_NOT_TRUST, OU=Created by https://www.sitecore.com
[Issuer]
  CN=DO_NOT_TRUST_SIF121Root, O=DO_NOT_TRUST, OU=Created by https://www.sitecore.com
[Serial Number]
  298C4954C51E98AB4FB6C15C08E063BF
[Not Before]
  22/12/2018 18:52:58
[Not After]
  20/12/2028 18:52:58
[Thumbprint]
  D2108132587A8EEB7E271FE648AB2FEFDB490B7A
" did not return a result of True. Determine why the validation script failed, and then try the command again.
At C:\Program Files\WindowsPowerShell\Modules\SitecoreInstallFramework\2.0.0\Public\Install-SitecoreConfiguration.ps1:641 char:47
+                         & $entry.Task.Command @paramSet | Out-Default
+                                               ~~~~~~~~~
    + CategoryInfo          : InvalidData: (:) [Invoke-NewSignedCertificateTask], ParentContainsErrorRecordException
    + FullyQualifiedErrorId : ParameterArgumentValidationError,Invoke-NewSignedCertificateTask
0

Updated- Please check certificates to see if there are any duplicate certs, if that doesn't work please see the below blog post:

https://learnsitecorebasics.wordpress.com/2018/06/28/install-sitecoreconfiguration-the-certificate-does-not-have-a-property-that-references-a-private-key/.

Even i had faced this issue, i played around the certificates and moved certificate to CA root & fixed the issue unknowingly.

  • Thanks, Paramesh for your quick response. However, your suggestion could not help much. I have taken another approach to fix this issue and deleted all duplicate certificate which was generated. This has resolved the issue. – V J Dec 24 '18 at 20:04
  • Thanks V J, for letting me to know fix for the issue. – paramesh savale Dec 25 '18 at 5:04
0

You may have invalid or duplicate certificates already installed on the machine. You can delete these certificates and try executing script again.

If you already know the thumbprint id (listed in the SIF console error), you can execute below PowerShell script to delete

Get-ChildItem Cert:\LocalMachine\Root\<<thumbprint>> | Remove-Item

If you want to list of installed certificate for the location, you can execute below script to get that list.

Set-Location Cert:\LocalMachine\Root
Get-ChildItem | Format-Table Subject, FriendlyName, Thumbprint -AutoSize
0

I have also been struggling with this error.

The hints above have helped but these were the steps I had to take to get past this point of the script.

  1. Generated the initial parameters using SIFLess and then executed the SIFLess-EZ-*.ps1 script that it output using Powershell ISE.
  2. The error showed up as described above.
  3. Opened an MMC console with both Certificate stores for CurrentUser and LocalMachine nodes.
  4. In CurrentUser\Personal\Certificates there exists the certificate named DO_NOT_TRUST_SitecoreRootCert Note that this certificate is signed with a Private key.
  5. Export this certificate ensuring that you do so with the private key. This will make a file with a pfx extension. I put it in the C:\certificates folder that the script had already made.
  6. Check the CurrentUser\Trusted Root Certification Authority\Certificates folder. This folder should contain a cert with the same name and thumbprint as found in the Personal\Certificates folder. This cert should also be signed with a private key.
  7. Check the Local Computer\Trusted Root Certification Authority\Certificates folder. This folder should contain a cert with the same name and thumbprint as found in the Personal\Certificates folder. In my case this cert did not have a private key. This was the cause of the failure.
  8. Delete this certificate.
  9. Import the pfx file that you exported.
  10. Check that you now have a cert with the same name and thumbprint as in the CurrentUser store Plus that it has a private key.

You should have only one certificate with these properties: IssuedTo: DO_NOT_TRUST_SitecoreRootCert Friendly Name: Sitecore Install Framework HasPrivateKey: True Thumbprint: same for all

This one certificate name should exist in these folders: CurrentUser\Personal\Certificates CurrentUser\Trusted Root Certification Authority\Certificates Local Computer\Trusted Root Certification Authority\Certificates

Make sure you do not have duplicate certs in each of these folders.

Now try to run the Install script again. The modules will check to see if you already have a cert with the required name in each folder. And now when it checks in the Local Computer for the cert, then it should get past the valiation check for HasPrivateKey.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.