Invalid provider type specified, Keyset does not exist Not available Not available error, MS CRM 2011, 2013 CBA, IFD consiguration

while configuring CBA,IFD, I got below error while accessing CRM federation url in browser.

<?xml version="1.0" ?> - <error xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">   <exception>Unhandled Exception: System.ServiceModel.FaultException`1[[Microsoft.Xrm.Sdk.OrganizationServiceFault, Microsoft.Xrm.Sdk, Version=5.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35]]: System.Security.Cryptography.CryptographicException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #FCF77A9CDetail: <OrganizationServiceFault xmlns:i="http://www.w3.org/2001/XMLSchema-instance" xmlns="http://schemas.microsoft.com/xrm/2011/Contracts"> <ErrorCode>-2147220970</ErrorCode> <ErrorDetails xmlns:d2p1="http://schemas.datacontract.org/2004/07/System.Collections.Generic" /> <Message>System.Security.Cryptography.CryptographicException: Microsoft Dynamics CRM has experienced an error. Reference number for administrators or support: #FCF77A9C</Message> <Timestamp>2016-04-27T12:00:51.1956331Z</Timestamp> <InnerFault i:nil="true" /> <TraceText i:nil="true" /> </OrganizationServiceFault></exception>   <parameters xsi:nil="true" />   <displaytitle />   <displaytextencoded />   <displaytext />   <description>Invalid provider type specified.</description>   <file>Not available</file>   <line>Not available</line>   <details>Not available</details>   <traceInfo />   <requesturl>https://<URL>/Handlers/FederationMetadata.ashx</requesturl>   <pathAndQuery>/Handlers/FederationMetadata.ashx</pathAndQuery>   <source>ASHX_XML</source>   <stacktrace />   </error>

Solution 

I was updating new certificate in my new environment.
finally come to know that the CRS I have generated was SHA2 and it was generated using CNG Key by custom CRS.
as SHA1 was deprecated , so I have used custom way to generate and to get SHA2 I have used CNG Key. unfortunately MS CRM does not support CNG Key, rather Legacy Key.

URL: https://technet.microsoft.com/en-us/library/gg188582(v=crm.6).aspx
another URL https://support.microsoft.com/en-sg/kb/3079686 tell also something about CNG Key.


then I generated SHA1 by using Legacy or use IIS but got SHA2 from my CA provider and it works.


hope this helps...


Regards,
Yes.Sudhanshu