web
You’re offline. This is a read only version of the page.
close
Skip to main content

Notifications

Announcements

No record found.

News and Announcements icon
Community site session details

Community site session details

Session Id :
Dynamics 365 Community / Forums / Finance | Project Operations, Human Resources, ... / Keyset does not exist
Finance | Project Operations, Human Resources, ...
Suggested Answer

Keyset does not exist

(0) ShareShare
ReportReport
Posted on by Community member 9
Cannot Find Thumbprint by Certificatename - Keyset does not exist
 I've followed the link mentioned by MS trying to import/generate certificate  And uploaded it to the app registration's certificate and installed it inside the VM and modified the web.config file and also added the API permission for the application in azure but now I'm facing this issue / Keyset does not exist / can you please guide me what I've missed?
Regards,
Umapathi
I have the same question (0)
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 300,911 Super User 2025 Season 2 on at
    Hi Umapathi,
     
    Can you provide information about what you are trying to achieve here? Can you provide us the link from Microsoft you were referring to? That will help us understand what you were doing to get this error.
  • Suggested answer
    Community member Profile Picture
    Community member 9 on at
    1. Create self-signed cert in CHE via PowerShell command.

    New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "CHECert" -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -KeySpec Signature - Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -NotBefore (Get-Date -Year 2022 -Month 5 -Day 1) -NotAfter (Get-Date -Year 2025 -Month 12 -Day 31)

    1. On CHE go to Manage computer certificates, expand Personal | Certificates | right-click on certificate | All-Tasks | Export. In the wizard just keep defaults and export to .CER file.
    2. In Azure portal go to Microsoft Entra Id | App registrations on left | click New registration. Under the app registration go to Certificates and secrets and click Upload certificate. Choose the certificate .CER file you created and upload.
    3. In the app registration Overview click Add a Redirect URI. Then click Add a platform and provide F365 Finance base URL in the top URI redirect field and click Configure.
    4. In the app registration, click API permissions on left and then Add a permission. Choose Dynamics ERP and then Delegated permission. Make sure AX.FullAccess is checked and click Add permissions.
    5. Click Add a permission again. Choose Microsoft Graph and click Application permissions. Expand Group and check Group.Read.All. Expand User and check User.Read.All, then click Add permissions.
    6. You will see warnings so then click Grant admin consent for <> button.
    7. On the CHE, go to Manage computer certificates, expand Personal | Certificates and then right-click on the certificate and choose All Tasks and then Manage Private Keys. Click Add. Type in "Network Service", click the Check Names button, then OK.
    8. Make sure Allow -> Read permission is checked and click OK.
    9. On CHE go to K:\AosService\WebRoot\ and backup web.config file. Open the web.config in Notepad with Administrator permissions.
    10. In the web.config, replace the value of the Aad.Realm key with the application ID/client ID value. Replace the value of the Infrastructure.S2SCertThumbprint key and the GraphApi.GraphAPIServicePrincipalCert key with the value of the installed certificate's thumbprint.
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 300,911 Super User 2025 Season 2 on at
    Hi,
     
    Thanks for providing the detailed steps of the setup you did. Can you tell at what exact moment you get the error and what you try to achieve? Can you also share the URL of the Microsoft link that you used as guidance for the details of the setup steps you shared below?
  • Suggested answer
    Hana Xue Profile Picture
    Hana Xue Microsoft Employee on at
    Hi,
    You can check out the old thread on this issue, where you can try it out based on the errors mentioned in the official documentation, and you can also refer to other users' suggestions.  Cannot Find Thumbprint by Certificatename (dynamics.com)
    Best Regards,
    Hana

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Neeraj Kumar – Community Spotlight

We are honored to recognize Neeraj Kumar as our Community Spotlight honoree for…

Congratulations to the November Top 10 Community Leaders!

These are the community rock stars!

Leaderboard > Finance | Project Operations, Human Resources, AX, GP, SL

#1
Martin Dráb Profile Picture

Martin Dráb 664 Most Valuable Professional

#2
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 522 Super User 2025 Season 2

#3
Sohaib Cheema Profile Picture

Sohaib Cheema 303 User Group Leader

Last 30 days Overall leaderboard

Featured topics

End-of-life Announcement for Microsoft Dynamics GP

Product updates

Dynamics 365 release plans