CRYPT_E_NOT_FOUND error using certreq

Question

I am trying to upload an SSL certificate to my azure environment. I follow the official Azure documentation instructions located here .

When I run certreq -accept -user ... it will go back:

A certificate issued by a certification authority cannot be installed. Contact your administrator. Cannot find an object or property. 0x80092004 (-2146885628 CRYPT_E_NOT_FOUND)

I work as an administrator. I am using GoDaddy for my certificate. I converted crt, which godaddy gives you to cer (export).

I don’t see any corrections, but the standard “pay us and we will fix it for you with spyware”

Steps taken:

• I created dns subdomains on go daddy.

• Then I created my certification request by following the directions in the link above. (create a text file and run the certreq -new command with it.

• I took this file and uploaded the contents to godaddy

• When godaddy was done with my key authorization, I downloaded the version of the IIS key.

• Unzip the contents. Two files were included crt and p7b

• I installed certificates on my local computer (I tried with and without this step) in a personal folder.

• Then I exported crt to a cer file. I noticed that he said that he did not export keys on the last export screen.

• Then I ran the certreq -accept -user command on the server. At what point did I receive the Crypt_E_Not_found error.

Answer 1

I solved this problem by downloading IIS from the Windows Activation Service. Then I follow the instructions to create a certificate request for IIS.

After creating the certificate request in IIS on my local computer, I uploaded it to GoDaddy and followed the rest of the directions as usual.

https://www.digicert.com/csr-creation-microsoft-iis-7.htm

Not a good answer, but at least it is an answer to move. If I find something better, I will post it.

Answer 2

I encountered the same error when using certreq instructions in the documentation and in the GoDaddy certificate. I fixed this by accepting the request as follows:

 certreq -accept -machine <RandomFilenameFromGoDaddy>.crt 

I think the problem is that in the official instructions, the myrequest.txt file has MachineKeySet = True in it - I think it should be MachineKeySet = False (by default) in order to have user rights.