Dynamics Community Forum Thread Details

Alright, just to get everything into a single post, here are the steps I take to get the latest (10.0.0.37 at the time) vhd working, with MPOS/Store Commerce activated.

Download 10.0.0.37 vhd from Shared Asset Library
For me, I use vmware workstation, so I need to convert it, so WSL:
1. qemu-img convert FinandOps10.0.37.vhd -O vmdk FinandOps10.0.37.vmdk -p
Register new Azure App, with 2 Web redirect URIs. Once created, make note of the Application (client) ID.
1. https://usnconeboxax1aos.cloud.onebox.dynamics.com/
2. https://usnconeboxax1aos.cloud.onebox.dynamics.com/oauth/
On the desktop, run the shortcut as admin to generate self-signed certs. Paste in the client ID from step 3, and answer No to existing certs.
In powershell running as admin, run:
1. Install-Module AzureAD
Next we need to run the RetailTenantUpdateTool. First however, to get rid of cert errors we need to edit C:\RetailSDK\Tools\RetailTenantUpdateTool.ps1
1. Append -TrustServerCertificate to the invoke-sqlcmd on line 48
2. Save and close
3. Run the desktop shortcut RetailTenantUpdateTool as admin
4. Authenticate.
Run desktop shortcut AdminUserProvisioning as admin to add yourself as an admin
Once logged in, you’ll see lots of errors when attempting to visit the ‘Channel Database” module, e.g. No certificate found for id '7366E25DC94FA8A400FA0037FFF3BB300D9482D4'. The required data encryption certificate was not found when trying to edit the Database connection profile table and the ConnectionString field…
1. Run SSMS as admin, and run the query found below on the AXDB database.
2. https://dynamicsexemplified.wordpress.com/2021/08/10/dealing-with-crypto-encryption-error-in-dynamics-365-finance-and-supply-chain-tier-1-developer-machine/
3. iisreset
If you now go look at the Channel Profile page to get the correct Retail Server URLs, you’ll see the URLs are all set to https://MIGRATION_VALUE
1. We need to run the environment retarget scripts from shared asset library. I’ve seen reference many places to it NOT being needed, but my experience says otherwise.
2. Download, extract, and we need to edit a file to prevent certificate trust issues
3. Edit RetailServer\EnvironmentRetarget\RetargetRetailServer.ps1
  1. On line 50 change $env:COMPUTERNAME to ‘localhost’ so the check now reads:
  2. $isLocalSql = ($retargetingParameters.SqlServerInstance -eq 'localhost')
4. Save and either run the script directly within ISE, OR, run the retail retarget script "dot-sourced":
  1. powershell.exe -noexit -file .\RetargetRetailServer.ps1
If you check the ping status URL, you’ll see RealtimeServiceCheck is failing. We need to open and edit:
1. C:\RetailServer\webroot\bin\CommerceRunTime.Config
2. Locate this line: <add key="audienceUrn" value="spn:00000015-0000-0000-c000-000000000000" />
3. Replace the Number values with the same Azure AD Application(Client) ID value that was created at the beginning of the deployment.
4. Save and iisreset
5. RealtimeServiceCheck should now be green.
6. https://usnconeboxax1ret.cloud.onebox.dynamics.com/healthcheck?testname=ping
We need to run a 9999 full sync from the Channel Database page. But, first, to make sure things are working properly,
1. run the Azure Storage Emulator from the start menu. Should initialize, etc. If not, download and repair v.5.10 and reboot. Run the Azure Storage Emulator and it should initialize properly now.
2. Open the backoffice and get to the channel database module, in the Data Synchronization section, make sure the Default Channel database batch job status is Waiting. If its set to Withhold, running the 9999 and other jobs wont push through, and you’ll get errors when trying to activate such as “DA1023 - Could not resolve identity. The Microsoft Entra ID account is not mapped to an employee in Retail headquarters.” So, change the status to Waiting.
3. From the channel database page, run a 9999 full sync.
We have fixed just about everything, but activating MPOS will still fail with a DA3001 error. This is because we need a new certificate and a loopback exemption for the MPOS app. You can use fiddler classic to add the exemption, or, you can add it manually (for 10.0.0.37 Sealed MPOS).
1. Install MPOS from powershell, then run the Install shortcut on the desktop
2. Command prompt as admin:
3. CheckNetIsolation LoopbackExempt -a -n="Microsoft.Dynamics.Commerce.Pos_8wekyb3d8bbwe"
  1. https://blog.shafeeque.in/enable-loopback-exemption-for-dynamics-365-retail-mpos-the-easy-way/
4. The retailserver site in IIS is using the aos certificate, so the name mismatches. Fix that by creating a new cert and binding it to the retailserver site.
  1. https://ax.docentric.com/how-to-configure-a-safe-connection-to-a-d365fo-in-a-local-development-environment/
You should be able to activate CPOS, MPOS, etc. now!
Download the latest service update – 10.0.39 at time of writing this. Make sure to “unblock” the zip file in its properties before unpacking.
Edit the DefaultTopologyData.xml file to include all the modules installed, e.g.

<ServiceModelList>
<string>ALMService</string>
<string>AOSService</string>
<string>BIService</string>
<string>DevToolsService</string>
<string>DIXFService</string>
<string>PayrollTaxModule</string>
<string>PerfSDK</string>
<string>ReportingService</string>
<string>RetailCloudPos</string>
<string>RetailHQConfiguration</string>
<string>RetailSDK</string>
<string>RetailSelfService</string>
<string>RetailServer</string>
</ServiceModelList>

In command prompt as admin, in the update folder:
1. AXUpdateInstaller.exe generate -runbookid="OneBoxDev" -topologyfile="DefaultTopologyData.xml" -servicemodelfile="DefaultServiceModelData.xml" -runbookfile="OneBoxDev-runbook.xml"
2. AXUpdateInstaller.exe import -runbookfile=OneBoxDev-runbook.xml
3. AXUpdateInstaller.exe execute -runbookid=OneBoxDev
Updated to latest version, and everything should be working now.
Note: on step 15 I generally don’t include the MROneBox module because it always errors during the update. IF you want to include that, you will need to first run the MRServer_x64.msi setup in the extracted MROnebox/Scripts folder and then run the update or -rerunstep the failed MROneBox step. If that still errors, you need to run the ConfigureMRDatabase script in the MROnebox/Scripts/Update folder:
1. .\ConfigureMRDatabase.ps1 -NewAosDatabaseName AxDB -NewAosDatabaseServerName new_name -NewMRDatabaseName ManagementReporter -NewAxAdminUserPassword AOSWebSite@123 -NewMRAdminUserName MRUser -NewMRAdminUserPassword MRWebSite@123 -NewMRRuntimeUserName MRUSer -NewMRRuntimeUserPassword MRWebSite@123 -NewAxMRRuntimeUserName MRUser -NewAxMRRuntimeUserPassword MRWebSite@123
2. To get the password: C:\AOSService\webroot\bin\Microsoft.Dynamics.AX.Framework.ConfigEncryptor.exe -decrypt C:\retailserver\webroot\web.config

Sources:
https://ax.docentric.com/how-to-configure-a-safe-connection-to-a-d365fo-in-a-local-development-environment/
https://blog.shafeeque.in/enable-loopback-exemption-for-dynamics-365-retail-mpos-the-easy-way/
https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/dev-tools/vhd-setup
https://dynamicsexemplified.wordpress.com/2021/08/10/dealing-with-crypto-encryption-error-in-dynamics-365-finance-and-supply-chain-tier-1-developer-machine/
https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/migration-upgrade/vso-machine-renaming
https://learn.microsoft.com/en-us/dynamics365/fin-ops-core/dev-itpro/migration-upgrade/upgrade-latest-platform-update
https://nuxulu.com/2020-04-06-getting-onebox-vhd-dynamics-365-finance-and-operations-virtual-machine/

Issues with Activating MPOS on Development VHD 10.0.24 onwards

Helpful resources

Quick Links

Congratulations 2024 Spotlight Honorees

Meet the Top 10 leaders for December

Start Your Super User Journey Pt 2

Leaderboard

Featured topics

Product updates