Tuesday, August 26, 2008

SBS 2008 Install Certificate Package Error

Lots of people in our Beta program have been using the Install Certificate Package, and lots of people are reporting an error to install the certificate on their client computer.  When you get this error, the log file that appears in the same directory looks something like this:

8/21/2008 7:12 PM
OS version is 6.
Initial the CDP dialogue.
PC Radio button is clicked.

8/21/2008 7:12 PM
OS version is 6.
Initial the CDP dialogue.
Install the cert on PC.
Opening cert store.
Failed to add cert to the store. Error Code: [-2147024891]
Initial the Finish dialogue.

The key thing to note here is the piece in red.  This specific error code means "Access Denied". 

Due to the fact that Certificates can only be installed by local administrators, you need this type of permission.  That means on Windows XP, you need to be logged into the machine as a local admin, or on Vista, when it prompts you to elevate, you need to provide admin credentials.

3 comments:

Chris Knight said...

If the line in red means "Access Denied", then it should %^&$ing well say so!

We've moved on from the days of 60s/70s computing and the field manuals with the lookup tables for codes to English description. QA/QC/UAT/whatever-your-acronym-is should not be allowing this type of nonsense to occur!

Granted, the number in parens should still be printed in parens (hex might be a better choice though - more search engine returns for this), but the number should, nay MUST, be returned with a locale-friendly description. The sooner you beat this into your developers the better!

Sean Daniel said...

Yep, this is unfortunate. The tool is optomized for Vista, and allow prompts you for credentials, so you never really see Access Denied on a Vista machine.

David said...

I am running Vista Ult x64 and running normally or as admin both cause this same issues, is there something else other than general permissions this could mean?

David Murphy