SCCM - CMG Convert Failed from Classic Service to virtual machine scale set, Always Failing at ERROR: Exception occurred when getting certificate fesslcert identifier from key vault.

Question

Hello All,

Good Day!

We had a classic CMG Service, tried to convert it after registering the resource provider with existing service name and certificate but failed hence deleted all, tried creating a new certificate and Cname but still it is failing at the specific stage as mentioned below after creating the Key Vault, Even I tried in the test env where it went very smoothly and if the fesslcert was not there in the test lab but it imported also but here in the prod it throws weird message showing always - ERROR: Exception occurred when getting certificate fesslcert identifier from key vault. even case with Microsoft is pending, anyone want to do a deep dive about this issue, please guide

Resource Manager - Key vault sameplekeyvaultcmg created. Resource properties: {~~ "sku": {~~ "family": "A",~~ "name": "standard"~~ },~~ "accessPolicies": [~~ {~~ " "permissions": {~~ "secrets": [~~ "Get",~~ "List",~~ "Set",~~ "Delete"~~ ],~~ "certificates": [~~ "Get",~~ "List",~~ "Update",~~ "Create",~~ "Import",~~ "Delete"~~ ]~~ }~~ }~~ ],~~ "enabledForDeployment": true,~~ "enabledForTemplateDeployment": true,~~ "vaultUri": "provisioningState": "Succeeded"~~}

ERROR: Exception occurred when getting certificate fesslcert identifier from key vault. System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden.~~ at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)~~ at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)~~ --- End of inner exception stack trace ---~~ at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at Microsoft.Rest.RetryAfterDelegatingHandler.<SendAsync>d__7.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Rest.RetryDelegatingHandler.<>c__DisplayClass15_0.<<SendAsync>b__0>d.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Rest.RetryDelegatingHandler.<SendAsync>d__15.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Azure.KeyVault.KeyVaultCredential.<ProcessHttpRequestAsync>d__13.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Azure.KeyVault.KeyVaultClient.<GetCertificateWithHttpMessagesAsync>d__90.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Azure.KeyVault.KeyVaultClientExtensions.<GetCertificateAsync>d__21.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.ConfigurationManager.AzureManagement.ResourceManager.GetCertificateIdentifierFromKeyVaultEx(String vaultUrl, String certName, String& certThumbprint)

ERROR: Exception occured for service cmgprod : System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden.~~ at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)~~ at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)~~ --- End of inner exception stack trace ---~~ at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at Microsoft.Rest.RetryAfterDelegatingHandler.<SendAsync>d__7.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Rest.RetryDelegatingHandler.<>c__DisplayClass15_0.<<SendAsync>b__0>d.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Rest.RetryDelegatingHandler.<SendAsync>d__15.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Azure.KeyVault.KeyVaultCredential.<ProcessHttpRequestAsync>d__13.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Azure.KeyVault.KeyVaultClient.<GetCertificateWithHttpMessagesAsync>d__90.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.Azure.KeyVault.KeyVaultClientExtensions.<GetCertificateAsync>d__21.MoveNext()--- End of stack trace from previous location where exception was thrown --- at System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()~~ at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)~~ at Microsoft.ConfigurationManager.AzureManagement.ResourceManager.GetCertificateIdentifierFromKeyVaultEx(String vaultUrl, String certName, String& certThumbprint)~~ at Microsoft.ConfigurationManager.CloudServicesManager.TaskUtility.UploadServiceCertificateToKeyVault(AzureService azureService, String keyVaultName)~~ at Microsoft.ConfigurationManager.CloudServicesManager.CreateDeploymentTask.Start(Object taskState).