Receiving multiple errors regarding "DAL Generator failed for" or "Failed to generate package. Keyset does not exist."
search cancel

Receiving multiple errors regarding "DAL Generator failed for" or "Failed to generate package. Keyset does not exist."

book

Article ID: 162951

calendar_today

Updated On:

Products

IT Management Suite Client Management Suite

Issue/Introduction

During an upgrade, the following messages were noticed in the NS logs:

DAL errors started showing in logs for 
Altiris.NS.Replication.Hierarchy.Dal.dll and 
Altiris.NS.StandardItems.Dal.v4.2FF65FD64DC8089ED246FDDCD7A13815E0CD2FFE

DAL Generator failed.
Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.Replication.Hierarchy.Dal.v4.5E70CB8B861C85B022B38A46C5E83CCB09298821\Altiris.NS.Replication.Hierarchy.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'
...


DAL Generator failed for: Altiris.NS.Replication.Hierarchy.DataAccessLayer.HierarchyDataAccessLayer
Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.Replication.Hierarchy.Dal.v4.5E70CB8B861C85B022B38A46C5E83CCB09298821\Altiris.NS.Replication.Hierarchy.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'
...

DAL Generator failed.
Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.StandardItems.Dal.v4.2FF65FD64DC8089ED246FDDCD7A13815E0CD2FFE\Altiris.NS.StandardItems.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'


On more recent versions, you may see something like these:

Failed to configure: E:\Program Files\Altiris\Notification Server\Config\NS_Update.config

Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.StandardItems.Dal.v4.4A8824948D116B42ED54E95F9F927470F1C01E82\Altiris.NS.StandardItems.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'

Failed to install the product from the file: E:\Program Files\Altiris\Notification Server\Config\NS_Update.config

Critical error: Failed to compile shadow assembly.
error CS1548: Cryptographic failure while signing assembly 'c:\ProgramData\Symantec\SMP\DAL\Altiris.NS.StandardItems.Dal.v4.4A8824948D116B42ED54E95F9F927470F1C01E82\Altiris.NS.StandardItems.Dal.dll' -- 'Error signing assembly -- Unknown error (8013141c)'

A critical error occurred:
System.Reflection.TargetInvocationException: Exception has been thrown by the target of an invocation. ---> Altiris.NS.Exceptions.AeXException: Critical error: Failed to compile shadow assembly.  error CS0433
 
Lastly with 8.7.x we saw this message when trying to create the CEM Agent Install package:

Failed to generate agent package
Keyset does not exist
   [AeXException @ Altiris.NS.StandardItems.dll]
   at Altiris.NS.StandardItems.AgentManagement.CEMPackageRegistrator.BuildSitePackage(PackageMode, string, ICollection<InternetGatewayDetails>, ICollection<Guid>, ICollection<Guid>, string, DateTime, AgentPackageParameters, out DateTime, out string)
   at Altiris.NS.UI.Admin.ClientManagement.IbcmAgentInstallationPackage.GenerateCemPackage(AgentPackageParameters)
   at Altiris.NS.UI.Admin.ClientManagement.IbcmAgentInstallationPackage.OnGeneratePackage(object, EventArgs)

Environment

8.x

Resolution

If you're seeing this issue with 8.5 and later, please verify the following:

We found that in some occasions the permissions in the machine keys directory needed to have the service account (App Identity) added instead of just having them in the administrators group:

Option 1:

Give your App Identity Full Control in NTFS security permissions to the following folder: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys 

Option 2:

    1. Change security on directory: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys
    2. Add your App Identity account, with the following minimum "Advanced" set of NTFS permissions (Full Control is a better setting):
      • Create files / write data
      • Create folders / append data
      • Write attributes
      • Write extended attributes
      • Delete
    3. After hitting apply, accept that 5 directories were "Access is denied", if any.

 

Additional Information

NOTE: If you are using the steps to swap out the APP ID account and running into this issue, add BOTH App ID accounts with Full Control to the MachineKeys folder

See also KB 277023  Critical error in SIM: Failed to compile shadow assembly. error CS0433

 

 

Powered by Wolken Software