Install or Upgrade of Veeam Backup & Replication fails with “Error occurred during certificate processing.”

KB ID: 2137
Product: Veeam Backup & Replication
Published: 2016-06-23
Last Modified: 2022-03-01
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.

Cheers for trusting us with the spot in your mailbox!

Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest

error icon

Oops! Something went wrong.

Please try again later.

Challenge

When attempting to install or upgrade Veeam Backup & Replication, the "Installing Veeam Backup & Replication Server" step fails with:
Error occurred during certificate processing.
Error occurred during certificate processing.

Cause

This error occurs when the RSA private key generation fails during Veeam Backup & Replication installation.

Solution

This error only occurs when the Windows OS has been modified from its default settings. Therefore, it is prudent to review why these OS changes were made in the first place before adjusting them. This document does not provide security advice; it only serves to instruct how to identify which settings need to be changed to allow the Veeam Backup & Replication installation to operate.

Identify Underlying Error Code

First, determine which specific error code is occurring.

  1. Open C:\ProgramData\Veeam\Setup\Temp\BackupSrvLog.log
  2. Search for: VmWinError has been occurred. Error:
  3. Expand the section below with the same Error: #
VmWinError has been occurred. Error: 5
***Veeam***  Generating certificate...
***Veeam***  Creating key pair for self-signed certificate...
***Veeam***    Result: 0x80090016.Trying to create new key container... 
***Veeam***  VmWinError has been occurred. Error: 5.
Error occurred during certificate processing.

A WinError Error 5 represents "Access is Denied."

To resolve this, ensure the default permissions are assigned to the folder: C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys

  1. Open the Properties of the MachineKey folder.
MachineKeys Propties
  1. Switch to the Security tab, and click Advanced.
Security > Advanced
  1. The permissions should be as follows:
    • Everyone - Special - None - This folder only
    • Administrators - Full Control - None - This folder only
  2. To add/edit the permissions you may need to click "Change permissions"
Default Perms
Everyone MachineKeys Default
Administrators MachineKeys defaults

After the permissions to the MachineKeys folder have been corrected, attempt the install/upgrade again.

If the install fails again, and the error code remains the same, please zip the %programdata%\Veeam\Setup folder and create a support case.

VmWinError has been occurred. Error: 6
***Veeam***  Binding certificate to port...
***Veeam***  VmWinError has been occurred. Error: 6.
Error occurred during certificate processing.

WinError Error 6 represents "The handle is invalid."

This most often occurs when the HTTP service cannot be started because it is disabled.

  1. Open Regedit and navigate to the key:
    HKLM\SYSTEM\CurrentControlSet\Services\HTTP
  2. Make sure the value named Start is set to 3
  3. Reboot and try the install again.
HTTP set to 3
VmWinError has been occurred. Error: 50
***Veeam*** Binding certificate to port...
***Veeam*** VmWinError has been occurred. Error: 50.
Error occurred during certificate processing.

WinError Error 50 represents "The request is not supported."

This specifically occurs when the SCHANNEL security settings within the registry have been changed from the default. To ensure maximum compatibility, install Veeam Backup & Replication 11a or newer. If the issue persists, ensure that .net TLS settings have been configured according to KB2853.
 

Customers have reported to Veeam Support that they were able to resolve this specific error message using a third-party tool named "IIS Crypto" to set "Best Practices" schannel security settings.

VmWinError has been occurred. Error: 110
***Veeam*** An error occurred while trying to run command:
"C:\Users\\AppData\Local\Temp\openssl\openssl.exe" req -new -x509 -newkey rsa:2048 -days 3650 -sha256 -out "C:\Users\\AppData\Local\Temp\openssl\ca.crt" -keyout "C:\Users\\AppData\Local\Temp\openssl\ca.key" -config "C:\Users\\AppData\Local\Temp\openssl\opensslcfg.cnf" -subj "/CN=VBR" -extensions v3_req
Reason:Unknown error has been returned.
***Veeam*** Command line: '"C:\Users\\AppData\Local\Temp\openssl\openssl.exe" pkcs12 -export -inkey "C:\Users\\AppData\Local\Temp\openssl\ca.key" -in "C:\Users\\AppData\Local\Temp\openssl\ca.crt" -out "C:\Users\\AppData\Local\Temp\openssl\client.pfx" -name "Veeam Backup Server Certificate" -password pass:*****'.
***Veeam*** An error occurred while trying to run command:
"C:\Users\\AppData\Local\Temp\openssl\openssl.exe" pkcs12 -export -inkey "C:\Users\\AppData\Local\Temp\openssl\ca.key" -in "C:\Users\\AppData\Local\Temp\openssl\ca.crt" -out "C:\Users\\AppData\Local\Temp\openssl\client.pfx" -name "Veeam Backup Server Certificate" -password pass:*********
Reason:Unknown error has been returned.
***Veeam*** Importing certificate...
***Veeam*** Reading pfx-file...
***Veeam*** Error open file 'C:\Users\\AppData\Local\Temp\openssl\client.pfx'.
***Veeam*** VmWinError has been occurred. Error: 110.

WinError Error 110 represents "The system cannot open the device or file specified."

In this case, the specified file is the client.pfx file, which the system cannot open because it does not exist. The client.pfx file was not created due to the OpenSSL shown just prior to the attempt to import the certificate.

This situation should be investigated with the assistance of Veeam Support. Please zip the %programdata%\Veeam\Setup folder and create a case.

 

If the error # in the logs is not listed on this article, please zip the %programdata%\Veeam\Setup folder and create a case.

More Information

The VmWinError code # found in the log file is based on the Windows System Error Codes
Click here to send feedback regarding this KB, or suggest content for a new KB.
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.

Spelling error in text

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

Oops! Something went wrong.

Please try again later.

KB Feedback/Suggestion

This form is only for KB Feedback/Suggestions, if you need help with the software open a support case

By submitting, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Verify your email to continue your product download
We've sent a verification code to:
  • Incorrect verification code. Please try again.
An email with a verification code was just sent to
Didn't receive the code? Click to resend in sec
Didn't receive the code? Click to resend
Thank you!

Thank you!

Your feedback has been received and will be reviewed.

error icon

Oops! Something went wrong.

Please try again later.