Finance | Project Operations, Human Resources, ...

Keyset does not exist

(0) Share

Report

Posted on by UP-27041111-0

Cannot Find Thumbprint by Certificatename - Keyset does not exist

I've followed the link mentioned by MS trying to import/generate certificate And uploaded it to the app registration's certificate and installed it inside the VM and modified the web.config file and also added the API permission for the application in azure but now I'm facing this issue / Keyset does not exist / can you please guide me what I've missed?

Regards,

Umapathi

All responses (4)

Answers (0)

Sort by

André Arnaud de Cal... 307,115 Super User 2026 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi Umapathi,

Can you provide information about what you are trying to achieve here? Can you provide us the link from Microsoft you were referring to? That will help us understand what you were doing to get this error.
Suggested answer

UP-27041111-0 9 on at

Like (0)

Report
Copy link

Link copied!
Create self-signed cert in CHE via PowerShell command.

New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "CHECert" -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -KeySpec Signature - Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -NotBefore (Get-Date -Year 2022 -Month 5 -Day 1) -NotAfter (Get-Date -Year 2025 -Month 12 -Day 31)

On CHE go to Manage computer certificates, expand Personal | Certificates | right-click on certificate | All-Tasks | Export. In the wizard just keep defaults and export to .CER file.

In Azure portal go to Microsoft Entra Id | App registrations on left | click New registration. Under the app registration go to Certificates and secrets and click Upload certificate. Choose the certificate .CER file you created and upload.

In the app registration Overview click Add a Redirect URI. Then click Add a platform and provide F365 Finance base URL in the top URI redirect field and click Configure.

In the app registration, click API permissions on left and then Add a permission. Choose Dynamics ERP and then Delegated permission. Make sure AX.FullAccess is checked and click Add permissions.

Click Add a permission again. Choose Microsoft Graph and click Application permissions. Expand Group and check Group.Read.All. Expand User and check User.Read.All, then click Add permissions.

You will see warnings so then click Grant admin consent for <> button.

On the CHE, go to Manage computer certificates, expand Personal | Certificates and then right-click on the certificate and choose All Tasks and then Manage Private Keys. Click Add. Type in "Network Service", click the Check Names button, then OK.

Make sure Allow -> Read permission is checked and click OK.

On CHE go to K:\AosService\WebRoot\ and backup web.config file. Open the web.config in Notepad with Administrator permissions.

In the web.config, replace the value of the Aad.Realm key with the application ID/client ID value. Replace the value of the Infrastructure.S2SCertThumbprint key and the GraphApi.GraphAPIServicePrincipalCert key with the value of the installed certificate's thumbprint.
André Arnaud de Cal... 307,115 Super User 2026 Season 2 on at

Like (0)

Report
Copy link

Link copied!

Hi,

Thanks for providing the detailed steps of the setup you did. Can you tell at what exact moment you get the error and what you try to achieve? Can you also share the URL of the Microsoft link that you used as guidance for the details of the setup steps you shared below?
Suggested answer

Hana Xue Microsoft Employee on at

Like (0)

Report
Copy link

Link copied!

Hi,
You can check out the old thread on this issue, where you can try it out based on the errors mentioned in the official documentation, and you can also refer to other users' suggestions. Cannot Find Thumbprint by Certificatename (dynamics.com)
Best Regards,
Hana