Certificate Import Fails With "the following certificates(s) were already known:"

Products

• Carbon Black App Control (formerly Cb Protection)

Issue/Introduction

When importing in a trusted certificate it fails with error message "the following certificates(s) were already known:" SHA256 Hash

Environment

• App Control Server: All Supported Versions

Cause

This happens if the certificate is already in the DAS database

Resolution

Open the certificate and check the properties to confirm it's the correct certificate

The value included with the error message is not the sha256RSA so it may be hard to confirm without actually looking at the physical certificate

Additional Information

• The certificate should be in .cer format which doesn't include the private key
• The following query will display all the trusted certificates currently in the database

  select cert_id, agent_trust, subject_name AS 'Trusted Certificate', thumbprint, serial_number, valid_from, valid_to, date_created, date_modified from dbo.certificates (nolock) where agent_trust not like 0 order by date_modified DESC;