Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / Keyset does not exist
Finance | Project Operations, Human Resources, ...
Suggested answer

Keyset does not exist

(0) ShareShare
ReportReport
Posted on by Community member 9
Cannot Find Thumbprint by Certificatename - Keyset does not exist
 I've followed the link mentioned by MS trying to import/generate certificate  And uploaded it to the app registration's certificate and installed it inside the VM and modified the web.config file and also added the API permission for the application in azure but now I'm facing this issue / Keyset does not exist / can you please guide me what I've missed?
Regards,
Umapathi
  • Suggested answer
    Hana Xue Profile Picture
    Hana Xue Microsoft Employee on at
    Keyset does not exist
    Hi,
    You can check out the old thread on this issue, where you can try it out based on the errors mentioned in the official documentation, and you can also refer to other users' suggestions.  Cannot Find Thumbprint by Certificatename (dynamics.com)
    Best Regards,
    Hana
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 292,468 Super User 2025 Season 1 on at
    Keyset does not exist
    Hi,
     
    Thanks for providing the detailed steps of the setup you did. Can you tell at what exact moment you get the error and what you try to achieve? Can you also share the URL of the Microsoft link that you used as guidance for the details of the setup steps you shared below?
  • Suggested answer
    Community member Profile Picture
    Community member 9 on at
    Keyset does not exist
    1. Create self-signed cert in CHE via PowerShell command.

    New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "CHECert" -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -KeySpec Signature - Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -NotBefore (Get-Date -Year 2022 -Month 5 -Day 1) -NotAfter (Get-Date -Year 2025 -Month 12 -Day 31)

    1. On CHE go to Manage computer certificates, expand Personal | Certificates | right-click on certificate | All-Tasks | Export. In the wizard just keep defaults and export to .CER file.
    2. In Azure portal go to Microsoft Entra Id | App registrations on left | click New registration. Under the app registration go to Certificates and secrets and click Upload certificate. Choose the certificate .CER file you created and upload.
    3. In the app registration Overview click Add a Redirect URI. Then click Add a platform and provide F365 Finance base URL in the top URI redirect field and click Configure.
    4. In the app registration, click API permissions on left and then Add a permission. Choose Dynamics ERP and then Delegated permission. Make sure AX.FullAccess is checked and click Add permissions.
    5. Click Add a permission again. Choose Microsoft Graph and click Application permissions. Expand Group and check Group.Read.All. Expand User and check User.Read.All, then click Add permissions.
    6. You will see warnings so then click Grant admin consent for <> button.
    7. On the CHE, go to Manage computer certificates, expand Personal | Certificates and then right-click on the certificate and choose All Tasks and then Manage Private Keys. Click Add. Type in "Network Service", click the Check Names button, then OK.
    8. Make sure Allow -> Read permission is checked and click OK.
    9. On CHE go to K:\AosService\WebRoot\ and backup web.config file. Open the web.config in Notepad with Administrator permissions.
    10. In the web.config, replace the value of the Aad.Realm key with the application ID/client ID value. Replace the value of the Infrastructure.S2SCertThumbprint key and the GraphApi.GraphAPIServicePrincipalCert key with the value of the installed certificate's thumbprint.
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 292,468 Super User 2025 Season 1 on at
    Keyset does not exist
    Hi Umapathi,
     
    Can you provide information about what you are trying to achieve here? Can you provide us the link from Microsoft you were referring to? That will help us understand what you were doing to get this error.

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Announcing Our 2025 Season 1 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Vahid Ghafarpour – Community Spotlight

We are excited to recognize Vahid Ghafarpour as our February 2025 Community…

Tip: Become a User Group leader!

Join the ranks of valued community UG leaders

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 292,468 Super User 2025 Season 1

#2
Martin Dráb Profile Picture

Martin Dráb 231,287 Most Valuable Professional

#3
nmaenpaa Profile Picture

nmaenpaa 101,156

Leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans