Errors when trying to Renew Azure AD MFA Extension Certificates

Question

I am trying to Renew our Azure AD MFA Extension Certificates, but when I run the PowerShell script I get this:

Set-ItemProperty : Cannot find path 'HKLM:\SOFTWARE\Microsoft\AzureMfa' because it does not exist.

At C:\Program Files\Microsoft\AzureMfa\Config\AzureMfaNpsExtnConfigSetup.ps1:41 char:5

• Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\AzureMfa\" -Name ...
  

• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : ObjectNotFound: (HKLM:\SOFTWARE\Microsoft\AzureMfa:String) [Set-ItemProperty], ItemNotFoundException
  • FullyQualifiedErrorId : PathNotFound,Microsoft.PowerShell.Commands.SetItemPropertyCommand

Import-Module : The specified module 'C:\Program Files (x86)\WindowsPowerShell\Modules\AzureMfaClientCertProvider' was not loaded because no valid module file was found in any module directory.

At C:\Program Files\Microsoft\AzureMfa\Config\AzureMfaNpsExtnConfigSetup.ps1:53 char:1

• Import-Module -Name $env:ProgramFiles\WindowsPowerShell\Modules\Azure ...

• 
      + CategoryInfo          : ResourceUnavailable: (C:\Program File...entCertProvider:String) [Import-Module], FileNotFoundException
  
      + FullyQualifiedErrorId : Modules_ModuleNotFound,Microsoft.PowerShell.Commands.ImportModuleCommand
  
   
  

Answer 1

@Don In IT Thank you for reaching out to us, on the server where you are trying to perform renewal of certificate what do you see in the computer store (certlm.msc) do you see the certificate for nps configuration?

Above mentioned error is very much generic referring to certificate not present/module is not found.

Request you to review the steps mentioned here - https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-nps-extension-vpn#configure-certificates-for-use-with-the-nps-extension-by-using-a-powershell-script:~:text=%3E%20Settings.-,Install%20the%20NPS%20extension,-The%20NPS%20extension to check if it helps else we can connect offline to discuss further on this.