CommerceSitecore

Sitecore 9.2 Installation Might Error Out While Runnings Marketing Automation Engine

My Sitecore 9.2 installation kept on failing on the step where it tries to start the Sitecore Marketing Automation Engine service. When I looked at the logs of Marketing Automation

yourpath\inetpub\wwwroot\xconnectinstancefolder\App_Data\jobs\continuous\AutomationEngine\App_Data\Logs, I found

 

I thought there is something wrong with xConnect instance as xConnect is not being initialized, so browsed https://xconnect.dev.local/ which is my local instance of xConnect. I received 404 so I started looking at xConnect logs this time which said

After a bit of investigation, I came across two reasons which can cause this

  1. Either you non-self-signed certificates installed on Trusted Root CA While recent changes in security policy don’t allow this
  2. Or you have too many signed certificates installed on Trusted Root CA

One of these can lead you to failure of xConnect service. I came across a useful power shell command which lists down non-self signed certificates being installed on trusted Trusted Root CA. Due to recent change in policies, unsigned certificates can’t be part of Trusted Root, my xConnect was failing.

I ran the following two commands, first one gives the list of non-self signed certificates

I got two certificates as a result of this command, so I ran another command to move these to Intermediate CA.

I also deleted a few certificates which were no longer useful because I seemed to have too many certificates installed on my machine. As per the below citation from

The maximum size of the trusted certificate authorities list that the Schannel security package supports is 16 kilobytes (KB). Having a large amount of Third-party Root Certication Authorities will go over the 16k limit, and you will experience TLS/SSL communication problems.

 

This resolved my problem.

Best of luck.

Leave a Reply

Your email address will not be published. Required fields are marked *