The installation of a certificate authority certificate fails with error code "NTE_PROVIDER_DLL_FAIL".

Author Uwe GradeneggerPosted on Categories Troubleshooting, Certification AuthorityTags ,

Assume the following scenario:

  • A certification authority is installed.
  • The certificate authority uses a Gemalto/SafeNet Hardware Security Module (HSM) with the SafeNet Luna Key Storage Provider.
  • After the certification authority certificate is issued by the parent certification authority, it is installed to complete the role configuration.
  • The installation of the certificate authority certificate fails with the following error message:
An error was detected while configuring Active Directory Certificate Services.
The Active Directory Certificate Services Setup Wizard will need to be rerun to complete the configuration.
The new certificate public key does not match the current outstanding request.
The wrong request may have been used to generate the new certificate: Provider DLL failed to initialize correctly.
0x8009001d (-2146893795 NTE_PROVIDER_DLL_FAIL)

Do you know TameMyCerts? TameMyCerts is an add-on for the Microsoft certification authority (Active Directory Certificate Services). It extends the function of the certification authority and enables the Application of regulationsto realize the secure automation of certificate issuance. TameMyCerts is unique in the Microsoft ecosystem, has already proven itself in countless companies around the world and is available under a free license. It can downloaded via GitHub and can be used free of charge. Professional maintenance is also offered.

This message occurs when the logged in user's account is not authorized by the SafeNet KspConfig application on the HSM partition.

Please pay attention to upper/lower case when entering the user name.

Please also keep in mind that NT AUTHORITY\SYSTEM must be authorized so that the certificate authority service can be started afterwards.

Related links:

en_USEnglish
de_DEDeutsch en_USEnglish