Error: "Failed to generate package. The chain context handle is invalid..." when generating CEM agent packages

Products

• IT Management Suite

Issue/Introduction

When trying to create a cloud enabled management package the package fails to be created:

Failed to generate package. The chain context handle is invalid. Parameter name: certificate

Environment

ITMS 8.x

Cause

The SSL certificate for the Symantec Agent Website in IIS is missing from the server's personal certificate store on the Symantec Management Platform.

Also, having unnecessary certificates under the Personal can also cause problems.

Resolution

Try the following:

1. Open MMC on the SMP server and check that under the Personal certificate store, the certificates used for the Default Web site and Symantec Agent site are there. 
2. Re-import the CEM certificate to the personal certificate store in MMC on SMP Server.
3. If you have more certificates than the ones used in the Default Web Site and Symantec Agent Site in IIS manager, remove them (export them with their private key as a backup).
4. Run NS.CEM Certificate Synchronization schedule (in Task Scheduler)