Console Certificate Issues

Version 12

    Purpose

     

    The purpose of this document is to provide a resolution when obtaining the error 'Cannot obtain console certificate' when attempting to schedule a scan, deploy patches, or install the Shavlik Scheduler.

     

    Symptoms

     

    Within the deployment tracker you receive the error 'Cannot obtain console certificate'. You may also see the following error within the ST.Protect.native.log file:

     

    2009-10-07T14:01:50.1757750Z 0d8c E Deploy.cpp:2272 DeployMachine exception - class STCore::CInvalidOperationException at STScheduler.cpp:72: Cannot obtain console certificate

     

    Cause

     

    This issue is generally caused by the serial number within the Console certificate and the STEnvironment.config file not matching.

     

    Resolution

     

    1.    Open a command prompt by clicking the Windows button and typing 'CMD'.

    1.jpg

     

    2.    Within the command prompt type in 'MMC'.

     

    2.jpg

     

    3.    Navigate to File>Add Remove Snap-in.

     

    3.jpg

     

    4.    Select Certificates from the Available snap-ins and click 'Add'.

     

    4.jpg

     

    5.    Choose Computer Account and click 'Next'.

     

    5.jpg

     

    6.    Choose Local Computer and click 'Finish'

     

    6.jpg

     

    7.    Click 'OK' within the Add or Remove Snap-ins dialog box. You should now see 'Certificates (Local Computer)' within the 'Selected snap-ins'.

     

    7.jpg

     

    8.    Expand 'Certificates', navigate to Personal>Certificates and double-click on the certificate issued by 'ST Root Authority'.

     

    8.jpg

     

    9.    Click on the 'Details' tab and click on 'Serial Number' field.

     

    9.jpg

     

    10.    Navigate to C:\Program Files\LANDesk\Shavlik Protect and locate the STEnvironment.config file in this directory.

    Note: Please create a backup of this file prior to any changes.

     

    10.jpg


    11.    Open the STEnvironment.config file using a text editor such as Notepad and navigate to the line: consoleCertificateSerialNumber=

     

    11.jpg


    12.    Change the serial number to match the one in the certificate.

    Note:There should be no special characters or spaces and the serial number should only contain uppercase letters.


    13.    Restart the Shavlik services and the console.

     

    Affected Product(s)

     

    Shavlik Protect 9.x