Can't create a key of the Subject <'MyCAContainerName'>

Mely picture Mely · Apr 20, 2011 · Viewed 12.8k times · Source

using makecert i have written the commade:

makecert -pe -n "CN=Myauthority" -sr localmachine -ss Root -a sha256 -cy authority -r -sk MyCAContainerName -sky exchange -sp "Microsoft RSA Schannel Cryptographic Provider " -sy 12 -len 2048 certif.cer;

i recieved an error

Error: Can't create the key of the Subject <'MyCAContainerName'>

In seeking the solution, I discovered that the problem arises because I did not Authorizations on machineKey file : (C:\Documents and Settings\All Users\Application Data\Microsoft\Crypto\RSA\MachineKeys ), the

following link explains better what I'm saying;

http://support.microsoft.com/kb/278381

I followed the same procedures in order to have enough permissions to the a machine key, but the problem is always posed

Answer

Nathan picture Nathan · Jun 27, 2013

It seems that Can't create the key of the subject is a fairly generic error, however, what follows after it may give a clue.

While it may be caused by permissions errors (e.g. makecert.exe error: Can't create the key of the subject), I have also seen the error of the form Can't create the key of the subject ('<some guid>') caused by an incorrect parameter to the -sp argument.

In your case, Error: Can't create the key of the Subject <'MyCAContainerName'> would make me guess that there is something wrong with the -sk MyCAContainerName portion of the command, but the upshot is, if it is not something with permissions, than it is likely an incorrect command argument or combination of arguments.