{"id":1075,"date":"2016-11-23T17:34:38","date_gmt":"2016-11-23T16:34:38","guid":{"rendered":"http:\/\/blog.systemconnect.dk\/?p=1075"},"modified":"2017-01-15T17:26:46","modified_gmt":"2017-01-15T16:26:46","slug":"teknisk-uheld-nav-beklager","status":"publish","type":"post","link":"https:\/\/scblog.lynge.org\/?p=1075","title":{"rendered":"Teknisk uheld – NAV beklager…"},"content":{"rendered":"

Hvis du k\u00f8rer Windows Server 2016 p\u00e5 din NAV-server og fors\u00f8ger at ops\u00e6tte den med SSL-certifikat, ja s\u00e5 er du m\u00e5ske rendt i den her n\u00e5r du fors\u00f8ger at tilg\u00e5 Webklienten:<\/p>\n

\"Du<\/a>

Du kan ikke logge p\u00e5 som f\u00f8lge af tekniske problemer. Kontakt systemadministratoren.<\/p><\/div>\n

Men hvad g\u00f8r man hvis “systemadministratoren” er en selv?<\/p>\n

 <\/p>\n

Jo – Windows Eventviewer p\u00e5 serveren giver en fejl, hvor der godt gemt i en masse krims-krams-exceptions er f\u00f8lgende:<\/p>\n\n\n\n
The X.509 certificate CN=<dit\u00a0certifikat>\u00a0is not in the trusted people store. The X.509 certificate CN=<dit\u00a0certifikat> chain building failed. The certificate that was used has a trust chain that cannot be verified. Replace the certificate or change the certificateValidationMode. The revocation function was unable to check revocation because the revocation server was offline.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

…og det kan vi da trods alt bruge til noget, selvom det er uforst\u00e5elig hvorfor revocation-serveren er nede (for det er den ikke hvis man selv fors\u00f8ger at hente revocation listen manuelt).<\/p>\n

 <\/p>\n

Det er helt sikkert ikke det korrekte fix, men i hvert fald fungerer tingene igen hvis man lige\u00a0eksportere sit certifikat (uden private key delen)\u00a0fra “Personal” og importerer den igen\u00a0til “Trusted People” mappen i Management Console “Local Computer Certificate”. Bem\u00e6rk certifikatet alts\u00e5 skal ligge der to gange – en gang i “Personal” med private key, og en gang i “Trusted People” uden private key.<\/p>\n

 <\/p>\n

[Opdateret 15\/1-2017]
\nVi har i samarbejde med Microsofts support m.fl. fundet en bedre l\u00f8sning. I Internet Information Server (IIS) skal du \u00e5bne Application Pools, markere Microsoft Dynamics NAV 2017 Web Client Application Pool og \u00e5bne Advanced Settings. Her skal du finde Process Model \/ Load User Profile og s\u00e6tte den til False (default er True).<\/p>\n

 <\/p>\n

Bem\u00e6rk at vi indtil videre kun har set fejlen p\u00e5 Windows Server 2016 og kun med webklienten. Vi har kun testet med Dynamics NAV 2017, men andre HAR set fejlen med Dynamics NAV 2016.<\/p>\n

 <\/p>\n

Tak til Graves Kilsgaard<\/a> for at g\u00f8re opm\u00e6rksom p\u00e5 fejlen og l\u00f8sningen inden vi selv fandt den :-).<\/p>\n

 <\/p>\n

[Tilf\u00f8jet 15\/1-2017]
\nTak til Microsofts support og Freddys Blog<\/a> for at hj\u00e6lpe med at fejls\u00f8ge og komme med id\u00e9er og opmuntring.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hvis du k\u00f8rer Windows Server 2016 p\u00e5 din NAV-server og fors\u00f8ger at ops\u00e6tte den med SSL-certifikat, ja s\u00e5 er du m\u00e5ske rendt i den her n\u00e5r du fors\u00f8ger at tilg\u00e5 Webklienten: Men hvad g\u00f8r man hvis “systemadministratoren” er en selv? … L\u00e6s resten →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[40,41,38,32,35,36],"tags":[15,43,11,54,52,29,23,14,42,44,31,20],"class_list":["post-1075","post","type-post","status-publish","format-standard","hentry","category-c5-support","category-c5-teknik","category-dynamics-c5","category-dynamics-nav","category-nav-support","category-nav-teknik","tag-business-solutions","tag-c5","tag-dynamics","tag-dynamics-c5","tag-dynamics-nav","tag-fejl","tag-hint","tag-microsoft","tag-nav","tag-navigator","tag-navision","tag-udokumenteret"],"_links":{"self":[{"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=\/wp\/v2\/posts\/1075","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1075"}],"version-history":[{"count":6,"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=\/wp\/v2\/posts\/1075\/revisions"}],"predecessor-version":[{"id":1088,"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=\/wp\/v2\/posts\/1075\/revisions\/1088"}],"wp:attachment":[{"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1075"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1075"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/scblog.lynge.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1075"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}