Installation of a certificate authority certificate fails with error message "Object was not found. 0x80090011 (-2146893807 NTE_NOT_FOUND)".

Author Uwe GradeneggerPosted on Categories Troubleshooting, Certification AuthorityTags

Assume the following scenario:

  • A new certification authority is installed.
  • After configuring the certification authority role and issuing the certification authority certificate, it should now be installed on the certification authority.
  • A hardware security module (HSM) is used to protect the private key of the certification authority certificate.
  • The installation of the certificate authority certificate fails with the following error message:
An error was detected while configuring Active Directory Certificate Services.
The Active Directory Certificate Services Setup Wizard will need to be rerun to complete the configuration.
The new certificate public key does not match the current outstanding request.
The wrong request may have been used to generate the new certificate: Object was not found. 0x80090011 (-2146893807 NTE_NOT_FOUND)

No event is logged in the event viewer.

Contrary to the error message, the Subject Key Identifier (SKI) in the certificate request and in the issued certificate is identical.

Cause/Solution

This error occurs when no connection to the private key, or to the entire hardware security module is possible. Therefore, it should be checked:

  • Configuration of the HSM-specific Key Storage Provider (KSP).
  • Permissions on the private key.
  • Network connection to the hardware security module.

Related links:

en_USEnglish
de_DEDeutsch en_USEnglish