When trying to create a Cloud Enabled Management package in the console the following error is displayed: "Failed to generate package. Key not valid for use in specified state."
Creating the Cloud enabled management package from the console displays the following error:
"Failed to generate package. Key not valid for use in specified state."
Logs files on the Symantec Management Platform showed the following error:
Error executing Task (6c9b883f-ef5a-4802-99c4-df72c508137b). Exception: System.Security.Cryptography.CryptographicException: Key not valid for use in specified state.
During installation installation of the SMP a Agent CA certificate is created. You can see it by loading the Microsoft Management Console with the certificate snap-in and looking in the trusted root certificate folder. The name will be "SMP-FQDN name of your Server Agent CA". Example: SMP-Symantec01.EPM.com Agent CA. The Microsoft Management console was used to export this file for backup. When the certificate was restored it was imported with the Microsoft Management Console and the certificate snap-in. The default import marks the key as not exportable. If you import the key and don't mark it as exportable you will receive the error when trying to create the package.
Re-import the the Agent CA certificate with the Microsoft Management Console certificate snap-in, and ensure to flag the certificate as exportable. See the attached screen shot above.