28.5 C
Ahmedabad
Friday, July 4, 2025

Failed to decrypt SQL server machine serialized PFX certificate last error=0

Greeting for the day!! 

Today We will be discussed about due to any of the reason you have to change site server database ABC Server Database to XYZ Database server.

Scenarios: You Infrastructure is working as normal but due to existing server decommission or want to separate database from share database. 

How to Move Database from ABC Server to XYZ Database.

Login to your Site Server Control Panel Add or remove Program Select System Center Configuration site Setup:

You will be see below screen Click on Next:

In Getting Start Wizard

Select Perform Site maintenance or reset this site a Click Next:

In Site Maintenance Wizard

Select Modify SQL Server configuration Click on Next:

Database Information Wizard.

You will see existing site server configure Database as we have to change ABC database server to XYZ change new server name and click next

Wizard will check new server name and validate all pre request if all good then your new server configuration will go smooth as normal but today I will be sharing issue like while moving database getting error Failed to decrypt SQL Server machine serialized pfx certificate (LastError=0)

Issue: While moving Database using site maintenance wizard getting error 

Failed to decrypt SQL Server machine serialized pfx certificate (LastError=0)

Error on configMGRSetup.log

While open ConfigMGRSetuWizard.log you will see error like received error fail to create SQL server certificate

Now we have error how to fix to success full move. Above issue will reports on below scenarios. 

Pre request:

Step 1: The account used for the installation and the computer account of SCCM have to be members of the local admins group on SCCMDB and need also sysadmin rights in SQL.

Step 2:  make sure you configure the SQL services to run under a domain user account rather than as local system or network service. Running SQL under a domain user follows MS best practices.

Step 3: Certificate is not mapped to your SCCM Instance. How to verify ?

Launch the SQL Server Configuration Manager, expand SQL Server Network Configuration, right click Protocols for MSSQLSERVER and click Properties.  Make sure ConfigMGR SQL Server Identification Certificate is Mapped if missing then we have to create certificate and import in SCCMDB Server.

If Certificate is missing. How to Create Certificate?

Create ConfigMgr SQL Server Identification Certificate.

To create ConfigMgr SQL Server Identification Certificate, open the IIS management console. Select the server then double click Server Certificates

Right click on the right pane and click Create Self-Signed Certificate.

Provide a friendly name to this cert. Choose the certificate to be stored in Personal store. Click OK.

Now you have certificate import in SQL SERVER and configure in above mention Step 3.

In Our Scenario Certificate was missing we have mapped certificate and re run site maintenance wizard SQL server got change successful without any problem.

Hope you like solution!!! Happy Learning Keep watching space @hiraniconfigmgr.com

Many Problem, One Place solutions.

Thanks & Regards,
Haresh Hirani
Email: [email protected]
Follow me: Twitter @hirravi1
linkedin: https://www.linkedin.com/in/hiraniconfigmgr

Author

  • Hi, I Haresh Hirani, I am the person behind this webpage. Welcome to my page, Thank you for visiting the website and my page! My website is all about Microsoft technologies. More about ConfigMgr and all other technologies which are interesting for me. However, larger percentage of my posts are related to SCCM. Normally, like to post the interesting issues which I came across in my day to day tech life. you will find only solutions which comes on my day to day life.

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest posts