Certificate and composting issue with Citrix App Layering 2009 upgrade

[Venkat Bhimisetty]

After upgrading from 2005 to 2009 App Layering in Prod I am getting an error message while creating a version to OS Layer “The issuing certificate does not have a usable private key”.

 

In Dev App Layering I am getting "Waiting for the Compositing Engine machine to be ready" and after 20 minutes "The Compositing Engine failed to initialize after '00:20:00'."before the upgrade it used to work fine.

 

It happens on every layer (App, OS, Platform) I want to add  a Version :(

 

Config:

OS: Windows 10 1909

Connector: vSphere and PVS

Upgraded from 2005

 

[Rob Zylowski]

This worked for me when i got that error

First create a snapshot of the appliance

Then logon to the console as root with putty

 

Run

certmgr -list -c -m Root | grep -C 3 CN=DefaultRootCertificate

 

That will output a unique hash which you use in the next command

certmgr -del -c -m Root <UniqueHashHere>

 

Test creating layers.

If it works then delete the snapshot

[Venkat Bhimisetty]

On 10/2/2020 at 11:00 AM, Rob Zylowski1709158051 said:

This worked for me when i got that error

First create a snapshot of the appliance

Then logon to the console as root with putty

 

Run

certmgr -list -c -m Root | grep -C 3 CN=DefaultRootCertificate

 

That will output a unique hash which you use in the next command

certmgr -del -c -m Root <UniqueHashHere>

 

Test creating layers.

If it works then delete the snapshot

It is working now, Thank you!!

[Rob Zylowski]

Glad to help

[Mike Kelly1709153237]

On 10/6/2020 at 7:14 AM, Rob Zylowski1709158051 said:

Glad to help

I ran into this same issue today upgrading from V2008 to v2009.  I had a snapshot so I rolled back after the upgrade and upgraded again and on the second upgrade the issue did not occur.... very odd.

[AARON CRANE]

I just upgraded yesterday and have the exact same issue.

I ran the commands and tried creating a new application layer and still get the same error.

“The issuing certificate does not have a usable private key”.

Any progress on this?

I just tried this also same outcome.

https://discussions.citrix.com/topic/410573-certificate-error-after-upgrading-to-elm-2009/

 there was another upgrade today. When it finished downloading I installed it and now things seem to be working again.

 

[Ederson Crippa1709153080]

Hello, 

Connect via Putty session to ELM, as root, and run the following commands :
1.    certmgr -list -c -m Root | grep -C 3 CN=DefaultRootCertificate
2.    certmgr -del -c -m Root <UniqueHashHere>
3.    systemctl restart maservice
4.    certmgr -list -c -m My | grep -C 3 JwtCertificate
5.    certmgr -del -c -m My <uniquehash>
6.    systemctl restart maservice

 

It worked fine for me.