while configuring CBA,IFD, I got below error while accessing CRM federation url in browser.
finally come to know that the CRS I have generated was SHA2 and it was generated using CNG Key by custom CRS.
as SHA1 was deprecated , so I have used custom way to generate and to get SHA2 I have used CNG Key. unfortunately MS CRM does not support CNG Key, rather Legacy Key.

URL: https://technet.microsoft.com/en-us/library/gg188582(v=crm.6).aspx
another URL https://support.microsoft.com/en-sg/kb/3079686 tell also something about CNG Key.
then I generated SHA1 by using Legacy or use IIS but got SHA2 from my CA provider and it works.
hope this helps...
Regards,
Yes.Sudhanshu
|
<?xml
version="1.0" ?>
- <error xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<exception>Unhandled
Exception:
System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault,
Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral,
PublicKeyToken=31bf3856ad364e35]]: System.Security.Cryptography.CryptographicException:
Microsoft Dynamics CRM has experienced an error. Reference number for
administrators or support: #FCF77A9CDetail: <OrganizationServiceFault
xmlns:i="http://www.w3.org/2001/XMLSchema-instance"
xmlns="http://schemas.microsoft.com/xrm/2011/Contracts">
<ErrorCode>-2147220970</ErrorCode> <ErrorDetails
xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic"
/> <Message>System.Security.Cryptography.CryptographicException:
Microsoft Dynamics CRM has experienced an error. Reference number for
administrators or support: #FCF77A9C</Message>
<Timestamp>2016-04-27T12:00:51.1956331Z</Timestamp>
<InnerFault i:nil="true" /> <TraceText
i:nil="true" /> </OrganizationServiceFault></exception>
<parameters
xsi:nil="true" />
<displaytitle />
<displaytextencoded />
<displaytext />
<description>Invalid
provider type specified.</description>
<file>Not
available</file>
<line>Not
available</line>
<details>Not
available</details>
<traceInfo />
<requesturl>https://<URL>/Handlers/FederationMetadata.ashx</requesturl>
<pathAndQuery>/Handlers/FederationMetadata.ashx</pathAndQuery>
<source>ASHX_XML</source>
<stacktrace />
</error>
|
Solution
I was updating new certificate in my new environment.finally come to know that the CRS I have generated was SHA2 and it was generated using CNG Key by custom CRS.
as SHA1 was deprecated , so I have used custom way to generate and to get SHA2 I have used CNG Key. unfortunately MS CRM does not support CNG Key, rather Legacy Key.
URL: https://technet.microsoft.com/en-us/library/gg188582(v=crm.6).aspx
another URL https://support.microsoft.com/en-sg/kb/3079686 tell also something about CNG Key.
then I generated SHA1 by using Legacy or use IIS but got SHA2 from my CA provider and it works.
hope this helps...
Regards,
Yes.Sudhanshu