Skip to main content

Notifications

Announcements

New Dynamics 365 Community Call! (ERP Edition)
News and Announcements icon
Dynamics 365 Community / Forums / Finance forum / Keyset does not exist
Finance forum
Suggested answer

Keyset does not exist

(0) ShareShare
ReportReport
Posted on by Community member 9
Cannot Find Thumbprint by Certificatename - Keyset does not exist
 I've followed the link mentioned by MS trying to import/generate certificate  And uploaded it to the app registration's certificate and installed it inside the VM and modified the web.config file and also added the API permission for the application in azure but now I'm facing this issue / Keyset does not exist / can you please guide me what I've missed?
Regards,
Umapathi
Categories:
Other
  • Suggested answer
    Hana Xue Profile Picture
    Hana Xue Microsoft Employee on at
    Keyset does not exist
    Hi,
    You can check out the old thread on this issue, where you can try it out based on the errors mentioned in the official documentation, and you can also refer to other users' suggestions.  Cannot Find Thumbprint by Certificatename (dynamics.com)
    Best Regards,
    Hana
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 290,246 Super User 2024 Season 2 on at
    Keyset does not exist
    Hi,
     
    Thanks for providing the detailed steps of the setup you did. Can you tell at what exact moment you get the error and what you try to achieve? Can you also share the URL of the Microsoft link that you used as guidance for the details of the setup steps you shared below?
  • Suggested answer
    Community member Profile Picture
    Community member 9 on at
    Keyset does not exist
    1. Create self-signed cert in CHE via PowerShell command.

    New-SelfSignedCertificate -CertStoreLocation Cert:\LocalMachine\My -DnsName "CHECert" -KeyExportPolicy Exportable -HashAlgorithm sha256 -KeyLength 2048 -KeySpec Signature - Provider "Microsoft Enhanced RSA and AES Cryptographic Provider" -NotBefore (Get-Date -Year 2022 -Month 5 -Day 1) -NotAfter (Get-Date -Year 2025 -Month 12 -Day 31)

    1. On CHE go to Manage computer certificates, expand Personal | Certificates | right-click on certificate | All-Tasks | Export. In the wizard just keep defaults and export to .CER file.
    2. In Azure portal go to Microsoft Entra Id | App registrations on left | click New registration. Under the app registration go to Certificates and secrets and click Upload certificate. Choose the certificate .CER file you created and upload.
    3. In the app registration Overview click Add a Redirect URI. Then click Add a platform and provide F365 Finance base URL in the top URI redirect field and click Configure.
    4. In the app registration, click API permissions on left and then Add a permission. Choose Dynamics ERP and then Delegated permission. Make sure AX.FullAccess is checked and click Add permissions.
    5. Click Add a permission again. Choose Microsoft Graph and click Application permissions. Expand Group and check Group.Read.All. Expand User and check User.Read.All, then click Add permissions.
    6. You will see warnings so then click Grant admin consent for <> button.
    7. On the CHE, go to Manage computer certificates, expand Personal | Certificates and then right-click on the certificate and choose All Tasks and then Manage Private Keys. Click Add. Type in "Network Service", click the Check Names button, then OK.
    8. Make sure Allow -> Read permission is checked and click OK.
    9. On CHE go to K:\AosService\WebRoot\ and backup web.config file. Open the web.config in Notepad with Administrator permissions.
    10. In the web.config, replace the value of the Aad.Realm key with the application ID/client ID value. Replace the value of the Infrastructure.S2SCertThumbprint key and the GraphApi.GraphAPIServicePrincipalCert key with the value of the installed certificate's thumbprint.
  • André Arnaud de Calavon Profile Picture
    André Arnaud de Cal... 290,246 Super User 2024 Season 2 on at
    Keyset does not exist
    Hi Umapathi,
     
    Can you provide information about what you are trying to achieve here? Can you provide us the link from Microsoft you were referring to? That will help us understand what you were doing to get this error.

Helpful resources

News and Announcements

New Dynamics 365 Community Call! (ERP Edition)

Quick Links

Dynamics 365 Community Update – Sep 9th

Welcome to the next edition of the Community Platform Update. This is a weekly…

Announcing Our 2024 Season 2 Super Users!

A new season of Super Users has arrived, and we are so grateful for the daily…

Community Spotlight for September 2024

Kudos to Mohana Yadav!

more Community News

Leaderboard

#1
André Arnaud de Calavon Profile Picture

André Arnaud de Cal... 290,246 Super User 2024 Season 2

#2
Martin Dráb Profile Picture

Martin Dráb 228,041 Super User 2024 Season 2

#3
nmaenpaa Profile Picture

nmaenpaa 101,148

Leaderboard

Featured topics

Product updates

Dynamics 365 release plans