Error: "Failed to generate package" using self-signed certificates and creating a CEM agent installation package


Article ID: 159366


Updated On:


Management Platform (Formerly known as Notification Server)


When using self-signed certificates and creating a Cloud-enabled Management (CEM) agent installation package you get the following error.

Failed to generate package. Object reference not set to an instance of an object.


When using self-signed certificates, a certificate should exist in the Trusted Root Certification Authority Store on the Notification Server named:

<Server Name>.<Domain>.local Agent CA

If you open the certificate and review the General tab, you should see a private key shown for the certificate.

If you are missing the private key you will get the error noted above when generating the CEM agent package.

A common cause for the missing private key is that when exporting a certificate, you are given an option to export the private key. If you select yes to this you will see a screen with a checkbox asking if you want to delete the private key if the export is successful. Checking this option will remove the original key when the certificate has been successfully exported and cause package creation to fail. 


If you successfully exported the certificate you should have a copy of the certificate that has the private key. Delete the old certificate on the Notification Server and import the copy containing the private key.

Also make sure the private key is exportable when importing the certificate into the Trusted Root certificates under the local machine. This is needed for signing of other certificates.


Applies To

ITMS 7.5
ITMS 7.5 SP1
ITMS 7.6