window azure issuer name and certificate is missing under CRM customization

(0) Share

Report

Posted on by Community Member

hi,

I've installed CRM 2015 on-premises and want to get window azure issuer name and certificate under CRM->Settings->Customization->Developer resource but it's seem this is missing, so there we need to do any other configuration then it would be enabled.

Refer below screen.

1732.2.png

Please anyone help me here.

Thanks!

*This post is locked for comments

I have the same question (0)

All responses (13)

Answers (3)

Nirmal_CRM 177 on at

Like (0)

Report

hey did you get answer for your question ? I am looking for same

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (0)

Report

yes Nirmal, i have done this.

you need to export CRM certificate from server with the private key then run the window power shell in server and import the same exported certificate using the power shell command. Refer below steps

we must now grant read rights to the Microsoft Azure Service Bus Issuer Certificate for the account that the Microsoft Dynamics CRM Asynchronous Processing Service is currently running under. If you do not know which account is running the Async service, you can determine this by opening the Services snap-in either through the "mmc" console or by entering "services.msc" into the Start menu on the CRM server and checking the "Log On As" column next to the Microsoft Dynamics CRM Asynchronous Processing Service entry.

Once you have identified both accounts, click Start and run the "mmc" console. In the console window, click File -> Add/Remove Snap-in, choose Certificates, select Computer Account, click Next, click Finish, and click OK. Export the same certificate with the private key by choosing "Manage Private Keys" as shown below

while exporting make sure that "Base-64 encoded X.509 (.CER)" is selected.

Now, open an elevated PowerShell prompt by navigating to Start -> Windows PowerShell -> Run as Administrator and execute "Add-PSSnapin Microsoft.Crm.PowerShell" to load the relevant cmdlets. We can then execute the "Set-CrmCertificate" cmdlet using the following syntax:

Set-CrmCertificate -CertificateType AppFabricIssuer -Name IssuerName -StoreName My -StoreLocation LocalMachine -StoreFindType FindBySubjectDistinguishedName -DataFile C:\MDMCRMCert.cer

The "IssuerName" value can be any identifier of your choosing (matching it to the instance name makes it easier to remember), while the certificate file path should match the location where you exported the public (.cer) certificate earlier. A successful execution will return you to the prompt:

Once complete, you should now see the certificate listed and downloadable in CRM under Settings -> Customizations -> Developer Resources.

Was this reply helpful? Yes No
Nirmal_CRM 177 on at

Like (0)

Report

Thank you very much Gaurav !! It was indeed clear description and quite understandable for beginners.

Unfortunately I could not make it success. I am not able to manage private keys.

I have logged in with user under whose Microsoft CRM async services are running. When I am clicking on manage private keys, I am getting another box prompting

Permission for Certificate private keys:

I have read access and full control access on CRM server.

Could you please let me know what rights are missing by me ?

I think, I have missed this part,

we must now grant read rights to the Microsoft Azure Service Bus Issuer Certificate for the account that the Microsoft Dynamics CRM Asynchronous Processing Service is currently running under.

What exactly you mean by that ?

Thanks in advance !!

Was this reply helpful? Yes No
Verified answer

Community Member on at

Like (0)

Report

You have to provide read permission to user which is under Microsoft CRM async services and log in with the same user and make sure that while adding certificate the "Certificate Snap In" would be prompting ,there you need to opt "Computer Account".

When you would be selecting manage private key, you would be getting "Permissions for <certificate name> private key" prompt there you need to add the user whom having the access “Microsoft Dynamic CRM Asynchronous Processing Service” and provide read permission then Navigate back to MMC Console and export the certificate.

There is a correction in my previous answer instead of "Base 64 encoded X.509 cer" ,opt "Include all certificates in the certification path if possible" under Personal Information Exchange.

Was this reply helpful? Yes No
Nirmal_CRM 177 on at

Like (0)

Report

Hi,

Thanks for all your response I understand, and I am able to go ahead. But after executing powerhsell command I received error as shown in screen.

Could you please let me know, what is wrong in it?

I am using deployment administrator and also services running under same user.

Regards,

Nirmal

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

Where are you running power shell??

It should be run in Crm Server.

Was this reply helpful? Yes No
Nirmal_CRM 177 on at

Like (0)

Report

Yes. I am running on CRM Application server

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

have u provided any password to certificate while exporting??

Was this reply helpful? Yes No
Community Member on at

Like (0)

Report

And also Select the admin user under "Certificate Export Wizard" while exporting certificate and don't provide any of password then try to run the power shell command.

Was this reply helpful? Yes No
Nirmal_CRM 177 on at

Like (0)

Report

It does not allow me to move ahead without entering password. Could you please answer below questions for me ?

1. are you using deployment administrator or user under which service are running ?

2. How did you generate this certificate in personal ? I did like this.

mmc. => file => Add/remove snap in =>certificates => ok

But I receive certificate of CRM server I guess. It appears to me that few steps are need to be taken prior to follow this sequence. Could you please let me know how did you generate this certificate ?

3. we have multiple organization on CRM server. So when I execute this command it throws me an error and ask me to provide dwsServerUrl. I gave dwsServerUrl and credentials too. Still I am getting unauthorized error. I tried to give service of CRM but still it throws error.

"SOAP security negotiation with URL failed."

Thanks in advance.

Was this reply helpful? Yes No