SCCM 2012 Install: Failed to create SQL Server Certificate

I received the following error during a System Center Configuration Manager 2012 install.

image

I checked out the log using CMTrace.exe and discovered these errors:

  • Cannot write CertBootStrap\SMS_SQL_SERVER\ registry key on server SQL.DOMAIN.com. The operating system reported error 4        Configuration Manager Setup        4/01/2012 1:18:55 AM        1376 (0x0560)
  • ERROR: Failed to write certificate configuration to registry on server SQL.DOMAIN.com        Configuration Manager Setup        4/01/2012 1:18:55 AM        1376 (0x0560)
  • ERROR: Failed to create SQL Server [SQL.DOMAIN.com] certificate remotely.        Configuration Manager Setup        4/01/2012 1:18:55 AM        1376 (0x0560)

To resolve this make sure the account you are installing with (logged in as when installing) has

  • local administrative rights on the SQL server
  • sysadmin role in SQL security

and

  • this key does not already exist in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SMS .

After you ensure the following try re-running your SCCM 2012 setup.

NOTE: CMTrace.exe can be found here: [SCCM2012InstallMedia]\Tools\CMTrace.exe

Leave a Comment