LCS Rotating secrets not working

(1) Share

Report

Posted on by Darrell Tunnell

We have not used the environment in some time, and our SSL cert has expired. In LCS I have been trying to /rotate secrets/ however after running for some time this results in /incomplete/.

I have logged into the VM using the username / password on the LCS environment details page - and windows warned me the users password had expired and needed changing. I updated the user account and set password not to expire, and kept it the same as the LCS environment page. I tried to rotate secrets again - same problem /incomplete/.

In the environment history there is no mentiong of even the attept of rotating secrets - its like nothing happens from the LCS environment history tab perspective.

How can I remedy this?

In addition - there are update packages to apply via LCS but these fail to. I was suspecting that the secret needed to be rotated first as perhaps the expired SSL cert causes the update attempt to fail.

I have the same question (7)

All responses (5)

Answers (1)

André Arnaud de Cal... 303,338 Super User 2026 Season 1 on at

Like (1)

Report
Copy link

Link copied!

Hi Darrell,

When rotating the secrets, the VM should be running. I thought it is trying to use the credentials from the LCS environment page. In case you changed the password (maybe you didn't), the rotating secrets can't be executed then.

Have you checked if all licenses are still valid? The VM comes with time-limited evaluation software. Maybe the Windows license and/or SQL got expired?

Anyway, if you deploy a new environment everything should work smoothly again.

Was this reply helpful? Yes No
Verified answer

Darrell Tunnell 26 on at

Like (2)

Report
Copy link

Link copied!

Figured out the issue in the end

Rotate secrets will fail if the WinRM ssl cert on the machine expires. Issue / fix described here https://cloudblogs.microsoft.com/dynamics365/it/2018/05/02/how-to-update-the-winrm-ssl-certificate-on-environments-deployed-in-your-subscription/

Once I worked through this (the procedure itself had some issues I needed to workaround tsssk) then I was finally able to rotate secrets.

Was this reply helpful? Yes No
André Arnaud de Cal... 303,338 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

Thanks for providing your solution for the community, Darrell. I have marked your reply as a verified answer.

Was this reply helpful? Yes No
Suggested answer

Navneeth Nagrajan 2,506 Super User 2026 Season 1 on at

Like (0)

Report
Copy link

Link copied!

HI,

Another suggestion is in case, if the Rotate Secret SSL is not working the first time then you need to first do the following to make the Rotate secrets work.

1. Rotate Dynamics Deployment certificate

2. Rotate Monitoring agent certificate

Once the above mentioned certificates work then you can do a Rotate SSL certificate

Was this reply helpful? Yes No
CU29041349-0 610 on at

Like (0)

Report
Copy link

Link copied!

Hi Darrell,

Having the same issue. Followed the article but could not find the Share asset library. Under Asset library > Model, I only see "Dynaway EAM [version]. Hoping you (or anyone) can provide some further details.

Was this reply helpful? Yes No