Windows 10: Certreq error 0x80090020 NTE_FAIL

Hi,I am having an issue trying to generate a basic CSR with certreqOS: Windows 11 22H2 VDI with vTPM on VMWare 7 Issue: We are trying to generate a basic CSR usingCertreq -new <path to Inf> <path to CSR>however it returns the error: “An internal error occurred. 0x80090020 -2146893792 NTE_FAIL” We are using a basic request policy, I’ve tried a few variations but I don’t think the request file is the issue. We just need to generate the key pair so we have the corresponding private key when the CSR is singed. Policy file: [Version]Signature = "$WindowsNT$" [NewRe

:)

 

Yubikey 5 and certreq

I'm trying to use bitlocker with a yubikey 5 NFC.

I installed the yubikey minidriver and followed this tutorial.

When I try to create the blcert using certreq –new blcert.txt.

Unfortunately I get the error "The smart card cannot perform the requested operation [...]".

When I uninstall the minidriver, I get the error that the smart card is read only.

Any ideas?

P.S. I should say that the FVE "folder" (Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FVE) was completely missing, so I didn't only add the "SelfSignedCertificates" but had to create FVE too.

 

UnattendedJoin error: failed to find the domain data (0x6e)

Thanks for the suggestion! I don't want to add a domain account, as this is a generic unattended install that will be used for all company machines. Do you think it's possible that the computer would join the domain if, instead of using UnattendedJoin in specialize, I used your steps but left out the specific account?

The other thing I was thinking was to use a generic account to allow the domain join during the specialize step. I added a machine password in the UnattendedJoin component, and instead of getting the error listed above, I got an authentication error, which makes me think I could probably do a secure join instead of the unsecure join.

Thoughts?

 

Error: No work available to process

Hmm. Either it's put out errors and WCG is limiting the work units available, or the project list may not be set to supply other WU when one runs out. (if the problem lies here and not on your end)

On the options to your left, if you go into Results Status, select the computer from Device Name and then look through results see if either they were returned late, errors or any other kind of issue that would stop the servers supplying WU from that perspective.

If there are no errors then it's maybe down to your project list. So selecting Device Manager from the left menu and then clicking on the profile assigned to that computer and make sure that it's assigned to receive WU for other projects if they run out.

At least those steps will rule out problems from the WCG end.