3

I'm trying to install Sitecore Experience Commerce 9.0 u3 (already installed Sitecore 9.0 u2) using SIF 2.0.0. I keep getting the following certificate errors:

Creation and startup of the CommerceOps_Sc9 Services web site completed
Creating self-signed certificate for CommerceOps_Sc9
Create new self-signed certificate
Install-SitecoreConfiguration : CertEnroll::CSignerCertificate::Initialize: Cannot find object or property. 0x80092004
(-2146885628 CRYPT_E_NOT_FOUND)
At C:\Program
Files\WindowsPowerShell\Modules\SitecoreInstallFramework\2.0.0\Public\Install-SitecoreConfiguration.ps1:641 char:25
+                         & $entry.Task.Command @paramSet | Out-Default
+                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-SitecoreConfiguration

[TIME] 00:01:46
Install-SitecoreConfiguration : CertEnroll::CSignerCertificate::Initialize: Cannot find object or property. 0x80092004
(-2146885628 CRYPT_E_NOT_FOUND)
At C:\Sitecore\SitecoreExperienceCommerce903\SIF.Sitecore.Commerce.1.4.7\Deploy-Sitecore-Commerce.ps1:80
char:2
+     Install-SitecoreConfiguration @params
+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Install-SitecoreConfiguration

[TIME] 00:02:47
Invoke-ManageCommerceServiceTask : CertEnroll::CSignerCertificate::Initialize: Cannot find object or property.
0x80092004 (-2146885628 CRYPT_E_NOT_FOUND)
At C:\Program
Files\WindowsPowerShell\Modules\SitecoreInstallFramework\2.0.0\Public\Install-SitecoreConfiguration.ps1:641 char:25
+                         & $entry.Task.Command @paramSet | Out-Default
+                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Write-Error], WriteErrorException
    + FullyQualifiedErrorId : Microsoft.PowerShell.Commands.WriteErrorException,Invoke-ManageCommerceServiceTask
3
  • 1
    I believe Sitecore 9.X should be installed only with SIF 1.2.1. See this other question for more information: sitecore.stackexchange.com/questions/15334/… Aug 1 '19 at 14:59
  • can you check your root certificate "DO_NOT_TRUST_SitecoreRootCert" exists in root cert location: cert:\\LocalMachine\\Root in "Trusted Root Certification Authorities". There should be only one with name "DO_NOT_TRUST_SitecoreRootCert" (hope you are using default configuration) Aug 2 '19 at 12:28
  • @VipinBanka under Certificates (Local Computer)\Trusted Root Certification Authorities\Certificates I have one DO_NOT_TRUST_SitecoreRootCert. under Certificates - Current User\Trusted Root Certification Authorities I have threee copies of DO_NOT_TRUST_SitecoreRootCert! I wonder if something is trying to create that cert each time I run the installer? Aug 2 '19 at 12:49
1

Export the PFX file of your you root certificate.

Make sure to select Export the private key.

enter image description here

and then Import it again in Personal Certificates

enter image description here

Hopefully it should resolve your issue.

0

If you go to the <Your Installation Assets Directory>/Configuration/Commerce/CommerceEngine/CommerceEngine.Deploy.json file, then you will notice that installation script is trying to apply the DO_NOT_TRUST_SitecoreRootCert certificate to the CommerceOps_Sc9 site.

Snippet from the configuration. enter image description here

So now go to windowr+R->type MMC-> Open certificate store by **Add/Remove Snap in** and check if your DO_NOT_TRUST_SitecoreRootCert certificate has little key icon available, as shown by arrow in the screenshot below.

enter image description here

If this key icon is available (which in my case was not available) then follow the steps suggested by the Manish Ramanan in the answer, but if this key icon is not available this means that your certificate has no private key attached. So for this, first you have to bind a private key with your certificate and then you will have to follow Manish Ramanan's answer.

SO, HOW CAN I BIND THE PRIVATE KEY TO MY CERTIFICATE.

  1. Open MMC on your computer (you can locate this program by typing “mmc” in your Windows search bar or typing it in the run command).

enter image description here

  1. Select “File > Add/Remove Snap-in” (or type Control-M). Select “Certificates” and click the Add button.

enter image description here

  1. Select “Computer account” and click Next…

enter image description here

…then direct the snap-in to manage the “Local computer” and click Finish.

enter image description here

  1. Click OK to add the snap-in.
  2. Next, navigate to the “Certificates (Local Computer) > Personal > Certificates” folder.

enter image description here

  1. Double-click to open the certificate, then select the “Details” tab to find and capture the serial number.

enter image description here

Run the certutil Program

  1. In order to perform the next step, you will need to open a command line session with administrator privileges. The most straightforward way to do this is to perform a search for “cmd”, then right-click the cmd icon and select “Run as administrator”. (Choose “Yes” if asked if you wish to allow this program to make changes on the computer.)

  2. At the command line, enter the following command, using your captured serial number:

    certutil -repairstore my "PLACE_SERIAL_NUMBER_HERE"

Make certain and place the serial number between the quote marks as shown. **It is best to actually type the serial number as the paste function can sometimes lose a character in the cmd window.

  1. If successful, this command will return some information about the certificate and a confirmation message.

enter image description here

  1. Close the command session and refresh MMC.

Now follow Manish Ramanan's answer to export and import the certificate again in the MMC and then try to run the script again you should not get the error anymore.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.