search

Icinga / icinga-powershell-framework

This PowerShell module will allow to fetch data from Windows hosts and use them for inventory and monitoring solutions. Together with the Icinga Web 2 module, a detailed overview of your Windows infrastructure will be drawn.
MIT License
77 stars 33 forks source link

Install-IcingaForWindowsCertificate fails #736

Closed drapiti closed 5 months ago

drapiti commented 5 months ago

On a specific system I am runnning into this error when importing the IcingaForWindowsCertificate:

image

Any ideas what may be the problem?

drapiti commented 5 months ago

Also on systems with temporary profiles such as citrix servers we are getting the following error: image

drapiti commented 5 months ago

@LordHepipud I've tested this workaround and modifying the registry before install it works: https://serverfault.com/questions/815607/looking-for-a-workaround-to-install-a-personal-certificate-in-a-mandatory-profil and restoring to initial value after install all works ok.

LordHepipud commented 5 months ago

Thank you for the issue and the workaround. What happens when you run

Start-IcingaWindowsScheduledTaskRenewCertificate

In general, this should resolve the issue as it offloads the certificate generation to a scheduled task in the System context.

I would rather not modify the registry on environments during installation tasks to be honest.

drapiti commented 5 months ago

Thank you for the issue and the workaround. What happens when you run

Start-IcingaWindowsScheduledTaskRenewCertificate

In general, this should resolve the issue as it offloads the certificate generation to a scheduled task in the System context.

I would rather not modify the registry on environments during installation tasks to be honest.

Great that's perfect, I will swap the Install-IcingaForWindowsCertificate command with the above.