How to identify and export the SQL server certificate

News Knowledge Base
1

A database administrator has applied a certificate to the Orchestrator database but not exported it for use on the server. What are the steps to export it?

Issue Description

The Orchestrator Application Event Viewer log will include the following error:

"System.Exception: Error:-1, Message: A connection was successfully established with the server, but then an error occurred during the login process. (provider: SSL Provider, error: 0 - The target principal name is incorrect.) at UiPath.OrchestratorCAs.IdentityDatabaseManager.RunDbMigrationToolObfuscatedLogging(String arguments, String[] tokensToObfuscate)"

Resolution

This issue is resolved with the steps in the article: The target principal name is incorrect. The current article details the steps to export the certificate applied to the SQL server, if not provided by the database administrator.

The steps to identify the SQL server certificate are:

  1. Log into the SQL Server host machine.
  2. Open MMC.
  3. File > Add/Remove Snap-in module (CTRL+M).
  4. Add the SQL Server Configuration Manager snap-in.

Adding SQL Server Configuration Manager snap-in

  1. Expand the SQL Server Network Protocol section.
  2. Right-click "Protocols for {SQL Server Name}" and select Properties.

Accessing the SQL Server protocol properties.

  1. Select the Certificate tab and View the certificate.

Viewing the SQL Server certificate.

  1. The Details tab shows a "Copy to File..." button that will run the Certificate Export Wizard.

Saving the certificate using the Wizard


The certificate can be exported without the private key as either of the *.CER filetypes to a preferred destination. If a path is not specified, the certificate will be exported to C:\Windows\System32\{filename}.cer.