Solved Certificate renewal Error

[TBWD]

Any Ideas?

3CX Phone System Professional
Version: v16.0 Update 6 (Build 655)

The SSL Certificate renewal for myfqdn.3cx.us failed - Error:
Internal.Cryptography.CryptoThrowHelper+WindowsCryptographicException: The requested operation is not supported.
at System.Security.Cryptography.CngKeyLite.SetKeyLength(SafeNCryptKeyHandle keyHandle, Int32 keySize)
at System.Security.Cryptography.CngKeyLite.GenerateNewExportableKey(String algorithm, Int32 keySize)
at System.Security.Cryptography.DSAImplementation.DSACng.GetDuplicatedKeyHandle()
at System.Security.Cryptography.DSAImplementation.DSACng.ExportKeyBlob(Boolean includePrivateParameters)
at System.Security.Cryptography.DSAImplementation.DSACng.ExportParameters(Boolean includePrivateParameters)
at PostInstall.CertificateUtils.DsaToDhParams(DSA dsa)
at PostInstall.CertificateGenerator.GenerateDhParam()
at PostInstall.CertificateGenerator.ProcessCertificatesDirectory(String directory, Boolean temporaryCertificateGenerated, Int32 regenerateNotSelfSignedCertificatesFrom, Int32 regenerateNotSelfSignedCertificatesTo, CloudServerStatus statuses, Int32 regenerateCertificateExiredInDays, String appBin, UInt16 sipPort, UInt16 tunnelPort, Nullable`1 httpPort, Nullable`1 httpsPort, Boolean isPassiveFailoverMode)
at PostInstall.CertificateGenerator.RenewCertificates(String appBin, String nginxConfigFolder, String configurationPath)

 

[cobaltit]

I'd get a system info zip and open a ticket with 3CX.

 

[JohnS_3CX]

What version of windows is this running on?

 

[TBWD]

Windows Server 2008R2 SP1, this is a remote system and I had no access to it, Yes I did tell the client to upgrade to 2016 or better. I am sure 2008R2 is the problem.

 

[JohnS_3CX]

Indeed, they will have to upgrade the OS in this case.. there's not way around it

Perhaps they can at least migrate to a Debian VM if they are not willing to upgrade the server, to keep 3CX inside a compliant machine

 

[TBWD]

We are in talks about that very thing, currently on prem, and not outside accessible I did download a support bundle, but one I saw the OS, I decided not to open a support ticket, i did not see any point.