PFX file isn't created after running 'Extract SSL certificate (x64)-Install' or 'Extract SSL certificate (x86)-Install' policy on site servers.

Products

• Deployment Solution

Issue/Introduction

A PFX file isn't created after running 'Extract SSL certificate (x64)-Install' or 'Extract SSL certificate (x86)-Install' policy on site servers.

The policy will run but a PFX file will not be created.  The pectagent in automation will attempt to connect to the site server but will fail.

Detailed information on the issue can be found on the site servers in the files 'iiscertdeployvbs.txt', iiscertdeployvbs_cu.txt' and 'IIScertdeployVBS_PS.txt' located on the root of the windows installation drive and in the 'pectagent.log' found in the WinPE environment.

Environment

DS 8.x

Cause

The current 'extract SSL certificate' policy doesn't extract certs from certificates that do not allow the private key to be exported.

Resolution

Please reference 'Tech251651' for a cumulative 8.5 DS pointfix that contains a fix for this issue.