How to setup X.509 Certificate for Spotfire Automation Services "Set Data Source Credentials" task

 

"System.Security.Cryptography.CryptographicException: Unable to retrieve the decryption key"

 

Steps to make sure that the X.509 certificate is installed correctly:

 

1. On Node Manager machine with Automation Services, start the Microsoft Management Console. Click the Windows start button and type "mmc".
2. Click File > Add\Remove snap-in, then add the Certificates snap-in for the Local Computer.
3. Select Certificates (Local Computer) > Personal > Certificates.
4. If you can't find the required X.509 Certificate in the list, then the certificate has not been installed on this computer. Obtain the certificate from your CA, copy it locally, then import it into the certificate store via the "Import" wizard. If you right click on the Certificates pane, you should be able to see the "Import" wizard option:

5. You must also make sure that the account running Node Manager Service (default account is usually Local System or Network Service) has the right to access and read the certificate. Changing access rights on Windows Server is done using Microsoft Management Console:

1. Make sure you have installed the certificate properly.
2. Start the Microsoft Management Console.
3. Add the Certificates snap-in for the Local Computer.
4. Select Certificates (Local Computer) > Personal > Certificates.
5. Right-click the installed impersonation user certificate and select All Tasks > Manage Private Keys.
6. Click Add.
7. Locate and select account Local System or Network Service or a domain service account used to run Node Manager service.
8. Grant "Read" permissions to this account.
9. Click OK.