Deployment Fails With Error: Found 0 Identity Certificates When Only One Was Expected

Version 7

    Purpose


    This document provides information on how to resolve the error "Found 0 identity certificates when only one was expected" when attempting to deploy patches

     

    Symptoms

     

    You receive the following error when trying to deploy patches

    Found 0 identity certs.PNG

    Also see the following error in the ST.TaskScheduler.Manged.log or the ST.Protect.Manged.log

     

    ThreadPoolJob.cs:260|System.InvalidOperationException: Found 0 identity certificates when only one was expected at ST.CA.ConsoleCertificateManager.GetIssuingCertificate()

     

    Cause

     

    Shavlik Protect is not able to identify valid certificates to use.

     

    Solution

     

      If you delete the console certificate any agents currently installed will need to be reinstalled or they will not be able to communicate with the console and will eventually uninstall themselves after not being able to check in after 45 days

     

    Option 1:  Renew the certificates for Protect via the STMgmt.exe by following this document Shavlik Protect Console Certificates


    Option 2:  If renewing the certificate doesn't work then you will need to uninstall Protect, delete the current console certificates and then reinstall Protect to create new certificates.

     

    1.    Open a command prompt by clicking the Windows button and typing 'CMD'.

    1.jpg

     

    2.    Within the command prompt type in 'MMC'.

     

    2.jpg

     

    3.    Navigate to File>Add Remove Snap-in.

     

    3.jpg

     

    4.    Select Certificates from the Available snap-ins and click 'Add'.

     

    4.jpg

     

    5.    Choose Computer Account and click 'Next'.

     

    5.jpg

     

    6.    Choose Local Computer and click 'Finish'

     

    6.jpg

     

    7.    Click 'OK' within the Add or Remove Snap-ins dialog box. You should now see 'Certificates (Local Computer)' within the 'Selected snap-ins'.

     

    7.jpg

     

    8.    Expand 'Certificates', navigate to Personal>Certificates and click on the certificate issued by 'ST Root Authority and delete it

    Personal.PNG

    9.    Expand 'Certificates', navigate to Trusted Root Certification Authorities>Certificates and click on the certificate issued by 'ST Root Authority and delete it

    TrustedRoot.PNG

     

    Affected Products


    Shavlik Protect All Versions