New-ACMEIdentifier : No registrations found

[Vokchaks]

Hello,

Help me please

I have ws2012 and Exchange 2013 and try receive SAN cedrtificate via ACME-Exchange

I get an error in the period

Creating a new identifier for mail.ngm.su …
New-ACMEIdentifier : No registrations found
строка:8 знак:2

• New-ACMEIdentifier -Dns $FQDN -Alias $FQDN | select status, Expires
  

• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: ( [New-ACMEIdentifier], InvalidOperationException
  • FullyQualifiedErrorId : System.InvalidOperationException,ACMESharp.POSH.NewIdentifier

Completing the challenge for the new identifier for mail.ngm.su …
Complete-ACMEChallenge : No registrations found
строка:11 знак:2

• Complete-ACMEChallenge $FQDN -ChallengeType http-01 -Handler iis -HandlerParame ...
  

• CategoryInfo : NotSpecified: ( [Complete-ACMEChallenge], InvalidOperationException
• FullyQualifiedErrorId : System.InvalidOperationException,ACMESharp.POSH.CompleteChallenge

[ahaw021]

hi @Vokchaks

what client are you using and what commands are you running

Andrei

[Vokchaks]

sorry, i do not uderstand a little

I use ACME-Exchange powershell script.
i get script from https://www.netometer.com/video/tutorials/How-to-Install-LetsEncrypt-Certificate-in-Exchange-Server/

[jared.m]

And how are you invoking this script?

[ahaw021]

hi @Vokchaks

If you do not share script you are using then people cannot help (script is a series of commands)

@netometer is the author of this script however i will try to assist

The challenge you have is that you have not registered for an account

this part of the code does it

if (-Not $my_vault)
{
Initialize-ACMEVault
New-ACMERegistration -Contacts mailto:$my_email -AcceptTos
}

You can run this in your powershell and replace the $my_email with your actual email

Import-Module ACMESharp
Initialize-ACMEVault
New-ACMERegistration -Contacts mailto:$my_email -AcceptTos

Andrei

[Vokchaks]

ok. I begin to understand.
i have actual email already, but value $my_vault was wrong

I did as you wrote and the beginning was good…

Creating a new identifier for autodiscover.ngm.su …

Status Expires

---

pending 25.07.2017 2:28:25
Completing the challenge for the new identifier for autodiscover.ngm.su …
Submitting the new identifier for autodiscover.ngm.su …

Creating a new identifier for owa.ngm.su …
pending 25.07.2017 2:28:33
Completing the challenge for the new identifier for owa.ngm.su …
Submitting the new identifier for owa.ngm.su …

Creating a new identifier for smtp.ngm.su …
pending 25.07.2017 2:28:41
Completing the challenge for the new identifier for smtp.ngm.su …
Submitting the new identifier for smtp.ngm.su …

Creating a new identifier for imap.ngm.su …
pending 25.07.2017 2:28:49
Completing the challenge for the new identifier for imap.ngm.su …
Submitting the new identifier for imap.ngm.su …

Creating a new identifier for pop.ngm.su …
pending 25.07.2017 2:28:56
Completing the challenge for the new identifier for pop.ngm.su …
Submitting the new identifier for pop.ngm.su …

Submit-ACMECertificate : Error creating new cert :: authorizations for these names not found or expired: autodiscover.ngm.su, imap.ngm.su, mail.ngm.su, owa.ngm.su, pop.ngm.su, smtp.ngm.su
строка:9 знак:1

• Submit-ACMECertificate $SANcert_alias *>&1 >> $acmelog

•   + CategoryInfo          : PermissionDenied: (ACMESharp.Vault.Model.CertificateInfo:CertificateInfo) [Submit-ACMECertificate], AcmeWebException
    + FullyQualifiedErrorId : urn:acme:error:unauthorized (403),ACMESharp.POSH.SubmitCertificate
  

Update-ACMECertificate : Certificate has not been submitted yet; cannot update status
line :11 character:14

• while (-Not (Update-ACMECertificate $SANcert_alias | select IssuerSerialNumber))

•          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
  

  • CategoryInfo : NotSpecified: ( [Update-ACMECertificate], Exception
  • FullyQualifiedErrorId : System.Exception,ACMESharp.POSH.UpdateCertificate
    …

[ahaw021]

hi @Vokchaks

As I did not write the script I am not able to offer anymore assistance

Andrei