Troubleshoot - CI Sync Agent Configuration connection validation error - Keyset does not exist

Error experienced

When using CI Sync Agent Configuration utility to validate a connection the following error occurs:

Error azure authentication: Keyset does not exist

This KB applies to:

Applies to Versions

All

Applies to Source Connectors

Azure

Applies to Destination Connectors

All

Error verification

image-20241126-072933.png

Cause

This error can occur when you use the CI Sync Agent Configuration utility to test a connection which is using a new Digital Certificate (i.e. one that hasn’t been previously validated).

This can happen for two main reasons:

Cause 1 - The Digital Certificate was imported into the Current User Certificate Store rather than the Local Machine Certificate Store.

Cause 2 - The CI Sync Agent user account (i.e. the user account used by the CI Sync Agent Windows Service) does not have sufficient permission to access the certificate store.

Fix

Two possible fixes are available below:

Fix 1

  1. Reimport the Digital Certificate into the Local Machine Certificate Store (and delete it from the Current User Certificate Store).

Fix 2

  1. Open Microsoft Management Console

  2. Navigate to Certificates - Local ComputerPersonal Certificates

  3. Right mouse click on the installed certificate and select All TasksManage Private Keys

    image-20260107-005833.png


  4. On the permissions window, click on the Add… button

    image-20260107-010201.png


  5. Search for Users, locate the CI Sync Agent User (e.g. lsagent), press Check Names.
    Then press the OK button.

    image-20260107-010452.png


  6. Back on the permissions window, make sure Full control and Read are ticked. 
    Then click Apply and then OK.

    image-20260107-010636.png


  7. Back on the Agent Configuration utility, test the connection which should now be authenticating correctly.

https://support.syncfish.com.au/cs/ckb043-troubleshoot-cisync-agent-configuration-con

Control Information

Created

Reviewed

Data Classification

PUBLIC
Classified in accordance with the Syncfish Data Classification Framework