locked
Certificate Error Step 40.47 RRS feed

  • Question

  • My installation of Azure Stack failed on step 40.47, so I started running it again with following commands:

    PS C:\CloudDeployment> Import-Module .\CloudDeployment.psd1
    PS C:\CloudDeployment> Import-Module .\ECEngine\EnterpriseCloudEngine.psd1
    PS C:\CloudDeployment> Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 40.47 -Verbose

    It still failed again with the following log:

    VERBOSE: [NC:Prerequisite] [WIN-KAPLH15SJDF]:                            [[ASCertReqByCredential]DirectResourceAccess] Submitting certificate request using separate process. - 1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] [WIN-KAPLH15SJDF]:                            [[ASCertReqByCredential]DirectResourceAccess] Attempt 1 : Testing for presence of C:\Windows\TEMP\ASCertReq-7e7d5xxx-xxxx-4b95-91f7-4151473a12f4.out - 1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] [WIN-KAPLH15SJDF]:                            [[ASCertReqByCredential]DirectResourceAccess] Attempt 1 : Testing for presence of C:\Windows\TEMP\ASCertReq-7e7d5xxx-xxxx-4b95-91f7-4151473a12f4.fail for failure -1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] [WIN-KAPLH15SJDF]:                            [[ASCertReqByCredential]DirectResourceAccess] Error while requesting for cert: Certificate not issued (Denied) Error Parsing Request  A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. 0x800b0101 (-2146762495 CERT_E_EXPIRED) Certificate Request Processor: Error Parsing Request  A required certificate is not within its validity period when verifying against the current system clock or the timestamp in the signed file. 0x800b0101 (-2146762495 CERT_E_EXPIRED) - 1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] [WIN-KAPLH15SJDF]: LCM:  [ End    Set      ]  [[ASCertReqByCredential]DirectResourceAccess]  in 6.5310 seconds. - 1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] Operation 'Invoke CimMethod' complete. - 1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] Time taken for configuration job to complete is 8.435 seconds - 1/11/2018 12:41:23 PM
    VERBOSE: [NC:Prerequisite] Exporting NC.azurestack.local PFX to \\SU1FileServer\SU1_Infrastructure_1\AzureStackCertStore\Internal\Current\NCCert\NC_REST.pfx - 1/11/2018 12:41:23 PM
    Invoke-EceAction : Cannot bind argument to parameter 'Cert' because it is null. - 1/11/2018 12:41:23 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 40.47  ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidData: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : ParameterArgumentValidationErrorNullNotAllowed,DeployNC,CloudEngine.Cmdlets.InvokeCmdlet
     
    WARNING: Task: Invocation of interface 'Prerequisite' of role 'Cloud\Fabric\NC' failed:
    Type 'Prerequisite' of Role 'NC' raised an exception:
    Cannot bind argument to parameter 'Cert' because it is null.
     - 1/11/2018 12:41:23 PM
    Invoke-EceAction : Task: Invocation of interface 'Prerequisite' of role 'Cloud\Fabric\NC' failed:
    Type 'Prerequisite' of Role 'NC' raised an exception:
    Cannot bind argument to parameter 'Cert' because it is null.
     - 1/11/2018 12:41:23 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 40.47  ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet
     
    VERBOSE: Step: Status of step '40.47 - (NET) Setup NC on VMs' is 'Error'. - 1/11/2018 12:41:23 PM
    VERBOSE: Checking if any of the in progress steps are complete. The following steps are currently in progress: '40.47'. - 1/11/2018 12:41:23 PM
    VERBOSE: Action: Action plan 'Deployment-Phase1-CreateVMs' failed. Finish running all steps that are currently in progress before exiting. - 1/11/2018 12:41:23 PM
    VERBOSE: Draining all steps that are still in progress. The following steps are still in progress or just completed: '40.47'. - 1/11/2018 12:41:23 PM
    VERBOSE: Action: Action plan 'Deployment-Phase1-CreateVMs' failed. - 1/11/2018 12:41:23 PM
    Invoke-EceAction : Action: Invocation of step 40.47 failed. Stopping invocation of action plan. - 1/11/2018 12:41:23 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 40.47  ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet
     
    VERBOSE: Action: Status of 'Deployment-Phase1-CreateVMs' is 'Error'. - 1/11/2018 12:41:23 PM
    COMPLETE: Task Cloud - Deployment-Phase1-CreateVMs
    VERBOSE: Task: Status of action 'Deployment-Phase1-CreateVMs' of role 'Cloud' is 'Error'. - 1/11/2018 12:41:23 PM
    VERBOSE: Step: Status of step '40 - Phase 1 - CreateVMs' is 'Error'. - 1/11/2018 12:41:23 PM
    VERBOSE: Checking if any of the in progress steps are complete. The following steps are currently in progress: '40'. - 1/11/2018 12:41:23 PM
    VERBOSE: Action: Action plan 'Deployment' failed. Finish running all steps that are currently in progress before exiting. - 1/11/2018 12:41:23 PM
    VERBOSE: Draining all steps that are still in progress. The following steps are still in progress or just completed: '40'. - 1/11/2018 12:41:23 PM
    VERBOSE: Action: Action plan 'Deployment' failed. - 1/11/2018 12:41:23 PM
    Invoke-EceAction : Action: Invocation of step 40 failed. Stopping invocation of action plan. - 1/11/2018 12:41:23 PM
    At line:1 char:1
    + Invoke-EceAction -RolePath Cloud -ActionType Deployment -Start 40.47  ...
    + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : InvalidOperation: (:) [Invoke-EceAction], Exception
        + FullyQualifiedErrorId : Unspecified error,CloudEngine.Cmdlets.InvokeCmdlet

    After checking the certificate, I found out that the Valid from time was set in the future and had not come into effect yet. The only other thing to mention is that the system was set to UTC -8:00 (PST) before I ran the script and when the error occurred.

    Is there any way to remedy this?


    Thursday, January 11, 2018 9:42 PM

Answers

  • Yes. Such issue/error typically occurs due to the time sync inconsistency/off as you have correctly identified. In this case, you would have to reinstall it from the scratch, invoke -rerun by not providing any step numbers. 

    --------------------------------------------------------------------------------------------------

    Do click on "Mark as Answer" on the post that helps you, this can be beneficial to other community members.

    Saturday, January 13, 2018 7:13 PM