Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / Async Client configura...
Finance | Project Operations, Human Resources, ...
Answered

Async Client configuration tool connection failed

(0) ShareShare
ReportReport
Posted on by Adil_aat 35

Async client configuration tool connection failed. Upon further digging I came to know that two of the certificates are expired. Async connection was working well before certificate expiry. I renewed the certificate from IIS and updated thumb in the both webconfig files. But still its showing connection failed.

Do I need to do any further steps to renew the licence.

Kindly please advice.

3386.Async.png

  • Verified answer
    A.Prasanna Profile Picture
    A.Prasanna 8,163 on at
    RE: Async Client configuration tool connection failed

    I just sent you private massage.  just reply via same.

  • Adil_aat Profile Picture
    Adil_aat 35 on at
    RE: Async Client configuration tool connection failed

    production server

  • A.Prasanna Profile Picture
    A.Prasanna 8,163 on at
    RE: Async Client configuration tool connection failed

    Is this production server or UAT/Test ?

  • Adil_aat Profile Picture
    Adil_aat 35 on at
    RE: Async Client configuration tool connection failed

    Hi Amith,

    As you said i removed all the certificate and created new certificate in IIS, added certificate to Trust Root Certificate Authority  and updated thumbkey in both web files.

    But still am getting same error.

    AlsoI followed suresh-anothernetprogrammer.blogspot.com/.../certificate-may-not-have-private-key.html . But I couldn't find manage puplic key as mention in the blog.

    Thank you

  • Verified answer
    A.Prasanna Profile Picture
    A.Prasanna 8,163 on at
    RE: Async Client configuration tool connection failed

    Hi Abdul,

    the exception says "It is likely that certificate 'CN=G1DB01.ARTCOMM.COM' may not have a private key that is capable of key exchange or the process may not have access rights for the private key."

    My suggestion is to remove all the certificates and regenerate , and then replace Thumbprints on Web.Config file .

    also cross check your steps with : www.axpulse.com/.../

    and for the safe side also check : suresh-anothernetprogrammer.blogspot.com/.../certificate-may-not-have-private-key.html

    Revert back with your findings .

    Thanks,

    Amith Prasnna

  • Adil_aat Profile Picture
    Adil_aat 35 on at
    RE: Async Client configuration tool connection failed

    Hi Amith,

    While loading url (https://<server>:8594/AsyncServer/UploadService.svc) still it showing Keyset does not exit and also event viewer report following events.

    WebHost failed to process a request.

    Sender Information: System.ServiceModel.ServiceHostingEnvironment+HostingManager/33711845

    Exception: System.ServiceModel.ServiceActivationException: The service '/Asyncserver/uploadservice.svc' cannot be activated due to an exception during compilation.  The exception message is: It is likely that certificate 'CN=xxxxxxx' may not have a private key that is capable of key exchange or the process may not have access rights for the private key. Please see inner exception for detail.. ---> System.ArgumentException: It is likely that certificate 'CN=xxxxxxxxxxx' may not have a private key that is capable of key exchange or the process may not have access rights for the private key. Please see inner exception for detail. ---> System.Security.Cryptography.CryptographicException: Keyset does not exist

      at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)

      at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle)

      at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()

      at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize)

      at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey()

      at System.ServiceModel.Security.SecurityUtils.GetKeyContainerInfo(X509Certificate2 certificate)

      at System.ServiceModel.Security.SecurityUtils.CanKeyDoKeyExchange(X509Certificate2 certificate)

      at System.ServiceModel.Security.SecurityUtils.EnsureCertificateCanDoKeyExchange(X509Certificate2 certificate)

      --- End of inner exception stack trace ---

      at System.ServiceModel.Security.SecurityUtils.EnsureCertificateCanDoKeyExchange(X509Certificate2 certificate)

      at System.ServiceModel.Security.ServiceCredentialsSecurityTokenManager.CreateServerX509TokenProvider()

      at System.ServiceModel.Security.ServiceCredentialsSecurityTokenManager.CreateLocalSecurityTokenProvider(RecipientServiceModelSecurityTokenRequirement recipientRequirement)

      at System.ServiceModel.Security.ServiceCredentialsSecurityTokenManager.CreateSecurityTokenProvider(SecurityTokenRequirement requirement)

      at System.ServiceModel.Channels.SslStreamSecurityUpgradeProvider.CreateServerProvider(SslStreamSecurityBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.ConnectionOrientedTransportChannelListener..ctor(ConnectionOrientedTransportBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.TcpChannelListener..ctor(TcpTransportBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.TcpReplyChannelListener..ctor(TcpTransportBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.TcpTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)

      at System.ServiceModel.Channels.DatagramChannelDemuxer`2..ctor(BindingContext context)

      at System.ServiceModel.Channels.ChannelDemuxer.GetTypedDemuxer(Type channelType, BindingContext context)

      at System.ServiceModel.Channels.ChannelDemuxer.BuildChannelListener[TChannel](BindingContext context, ChannelDemuxerFilter filter)

      at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel]()

      at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel](MessageFilter filter, Int32 priority)

      at System.ServiceModel.Channels.SecurityChannelListener`1.InitializeListener(ChannelBuilder channelBuilder)

      at System.ServiceModel.Channels.TransportSecurityBindingElement.BuildChannelListenerCore[TChannel](BindingContext context)

      at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)

      at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)

      at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)

      at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)

      at System.ServiceModel.ServiceHostBase.InitializeRuntime()

      at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)

      at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)

      at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)

      at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)

      --- End of inner exception stack trace ---

      at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)

      at System.ServiceModel.ServiceHostingEnvironment.EnsureServiceAvailableFast(String relativeVirtualPath, EventTraceActivity eventTraceActivity)

    Process Name: w3wp

    Process ID: 12232

    WebHost failed to process a request.

    Sender Information: System.ServiceModel.Activation.HostedHttpRequestAsyncResult/15306944

    Exception: System.ServiceModel.ServiceActivationException: The service '/Asyncserver/uploadservice.svc' cannot be activated due to an exception during compilation.  The exception message is: It is likely that certificate 'CN=xxxxxxxxxx' may not have a private key that is capable of key exchange or the process may not have access rights for the private key. Please see inner exception for detail.. ---> System.ArgumentException: It is likely that certificate 'CN=xxxxxxxxxxxx' may not have a private key that is capable of key exchange or the process may not have access rights for the private key. Please see inner exception for detail. ---> System.Security.Cryptography.CryptographicException: Keyset does not exist

      at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer)

      at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle)

      at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair()

      at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize)

      at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey()

      at System.ServiceModel.Security.SecurityUtils.GetKeyContainerInfo(X509Certificate2 certificate)

      at System.ServiceModel.Security.SecurityUtils.CanKeyDoKeyExchange(X509Certificate2 certificate)

      at System.ServiceModel.Security.SecurityUtils.EnsureCertificateCanDoKeyExchange(X509Certificate2 certificate)

      --- End of inner exception stack trace ---

      at System.ServiceModel.Security.SecurityUtils.EnsureCertificateCanDoKeyExchange(X509Certificate2 certificate)

      at System.ServiceModel.Security.ServiceCredentialsSecurityTokenManager.CreateServerX509TokenProvider()

      at System.ServiceModel.Security.ServiceCredentialsSecurityTokenManager.CreateLocalSecurityTokenProvider(RecipientServiceModelSecurityTokenRequirement recipientRequirement)

      at System.ServiceModel.Security.ServiceCredentialsSecurityTokenManager.CreateSecurityTokenProvider(SecurityTokenRequirement requirement)

      at System.ServiceModel.Channels.SslStreamSecurityUpgradeProvider.CreateServerProvider(SslStreamSecurityBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.ConnectionOrientedTransportChannelListener..ctor(ConnectionOrientedTransportBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.TcpChannelListener..ctor(TcpTransportBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.TcpReplyChannelListener..ctor(TcpTransportBindingElement bindingElement, BindingContext context)

      at System.ServiceModel.Channels.TcpTransportBindingElement.BuildChannelListener[TChannel](BindingContext context)

      at System.ServiceModel.Channels.DatagramChannelDemuxer`2..ctor(BindingContext context)

      at System.ServiceModel.Channels.ChannelDemuxer.GetTypedDemuxer(Type channelType, BindingContext context)

      at System.ServiceModel.Channels.ChannelDemuxer.BuildChannelListener[TChannel](BindingContext context, ChannelDemuxerFilter filter)

      at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel]()

      at System.ServiceModel.Channels.ChannelBuilder.BuildChannelListener[TChannel](MessageFilter filter, Int32 priority)

      at System.ServiceModel.Channels.SecurityChannelListener`1.InitializeListener(ChannelBuilder channelBuilder)

      at System.ServiceModel.Channels.TransportSecurityBindingElement.BuildChannelListenerCore[TChannel](BindingContext context)

      at System.ServiceModel.Channels.Binding.BuildChannelListener[TChannel](Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, BindingParameterCollection parameters)

      at System.ServiceModel.Description.DispatcherBuilder.MaybeCreateListener(Boolean actuallyCreate, Type[] supportedChannels, Binding binding, BindingParameterCollection parameters, Uri listenUriBaseAddress, String listenUriRelativeAddress, ListenUriMode listenUriMode, ServiceThrottle throttle, IChannelListener& result, Boolean supportContextSession)

      at System.ServiceModel.Description.DispatcherBuilder.BuildChannelListener(StuffPerListenUriInfo stuff, ServiceHostBase serviceHost, Uri listenUri, ListenUriMode listenUriMode, Boolean supportContextSession, IChannelListener& result)

      at System.ServiceModel.Description.DispatcherBuilder.InitializeServiceHost(ServiceDescription description, ServiceHostBase serviceHost)

      at System.ServiceModel.ServiceHostBase.InitializeRuntime()

      at System.ServiceModel.ServiceHostBase.OnOpen(TimeSpan timeout)

      at System.ServiceModel.Channels.CommunicationObject.Open(TimeSpan timeout)

      at System.ServiceModel.ServiceHostingEnvironment.HostingManager.ActivateService(ServiceActivationInfo serviceActivationInfo, EventTraceActivity eventTraceActivity)

      at System.ServiceModel.ServiceHostingEnvironment.HostingManager.EnsureServiceAvailable(String normalizedVirtualPath, EventTraceActivity eventTraceActivity)

      --- End of inner exception stack trace ---

      at System.Runtime.AsyncResult.End[TAsyncResult](IAsyncResult result)

      at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.End(IAsyncResult result)

    Process Name: w3wp

    Process ID: 12232

  • Adil_aat Profile Picture
    Adil_aat 35 on at
    RE: Async Client configuration tool connection failed

    Issuer name and server name is same. Let me try removing expired certificate.

    Please help me to use fiddler.

    Thank you

  • Suggested answer
    A.Prasanna Profile Picture
    A.Prasanna 8,163 on at
    RE: Async Client configuration tool connection failed

    Do one thing , just open your certificate and check what is under Issuer Name  and it should match with

    Server Name in your Async Server Url  (https://<server>:8594/AsyncServer/UploadService.svc) , further more it's says Key Set Does not exists. so it's something to do with Certificates . remove old certificates which are already expired.

    If you still hard to get what is happening Try to Use Fiddler to find out issues in your async service .

    Amith Prasanna

  • Adil_aat Profile Picture
    Adil_aat 35 on at
    RE: Async Client configuration tool connection failed

    yes bind both async server and real time server with new certificate.

  • Suggested answer
    A.Prasanna Profile Picture
    A.Prasanna 8,163 on at
    RE: Async Client configuration tool connection failed

    Hi Abdul ,

    Have you bind your renewed certificate with Async Server web Service .

    refer this to crosscheck our changes : blog.johanpersson.nu/ (just ignore ADCS related setups )

    Thanks ,

    Amith Prasanna

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

December Spotlight Star - Muhammad Affan

Congratulations to a top community star!

Top 10 leaders for November!

Congratulations to our November super stars!

Tips for Writing Effective Suggested Answers

Best practices for providing successful forum answers ✍️

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 291,280 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 230,214 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans