when i try to start the CLM Configuration Wizard i get an error message : Before running the configuration wizard, schema extensions for microsoft certificate lifecycle manager must be added into the AD. But i already added the extensions, and with mmc and adsiedit i can verfy that it is in the ad.What could be wrong?Server Windows 2008 Enterprise edition 64bit. ILM2 RC0

when i try to start the CLM Configuration Wizard i get an error message : Before running the configuration wizard, schema extensions for microsoft certificate lifecycle manager must be added into the AD. But i already added the extensions, and with mmc and adsiedit i can verfy that it is in the ad.What could be wrong?Server Windows 2008 Enterprise edition 64bit. ILM2 RC0 Are you sure that the schema changes have replicated completely?Paul Adare CTO IdentIT Inc. ILM MVP

its only one domain controller...as you can see the change was made 02/13/2009C:\Users\Administrator>dsquery * CN=ms-Clm-Data,CN=Schema,CN=Configuration,DC=vi-qa-28-x64-01,DC=local -scope base -attr *objectClass: topobjectClass: attributeSchemacn: ms-Clm-DatadistinguishedName: CN=ms-Clm-Data,CN=Schema,CN=Configuration,DC=vi-qa-28-x64-01,DC=localinstanceType: 4whenCreated: 02/13/2009 12:48:42whenChanged: 02/13/2009 12:48:42uSNCreated: 426068attributeID: 1.2.840.113556.1.6.41.1.2.1attributeSyntax: 2.5.5.12isSingleValued: TRUErangeUpper: 1024000uSNChanged: 426068showInAdvancedViewOnly: TRUEadminDisplayName: ms-Clm-DataadminDescription: Allows storing XML policy definition for the CLM Profile Template.oMSyntax: 64lDAPDisplayName: msClm-Dataname: ms-Clm-DataobjectGUID: {93A57BA3-E56D-40FF-B5B3-41DEF26F1392}schemaIDGUID: 0x6e 0xae 0xec 0x60 0x08 0x0b 0x31 0x46 0x8b 0xf4 0xaf 0x4a 0x73 0x8e 0xbe 0x3disMemberOfPartialAttributeSet: FALSEobjectCategory: CN=Attribute-Schema,CN=Schema,CN=Configuration,DC=vi-qa-28-x64-01,DC=localdSCorePropagationData: 01/01/1601 00:00:00msDS-IntId: -2047449892ADsPath: LDAP://BS-W2K8E-x64.vi-qa-28-x64-01.local/CN=ms-Clm-Data,CN=Schema,CN=Configuration,DC=vi-qa-28-x64-01,DC=local

Do you have UAC on? Are you running the config wizard with "run as administrator"?AhmadAW

UAC is off. I tried also to "run as administrator"...and with compatibility "XP sp2".

in the log i found an error that it cannot find the installation path c:\program files\microsoft certificate lifecycle manager\after reading the web.config file the program stopped with the above error message

Did you run the schema extension as an admin using UAC on the DC itself? I found the same problem when I ran the schema extensionroutinefrom a machine that was not a DC. Did you modify the VBS file to contain the correct domain details? Is the account part of schema admins group?

its all on one server Domain Controller/Certificate Authority/ SQL Server / IIS / CLM / ILM. UAC was turned off from the beginning. The schema extension runs directly on this server logged in as Administrator. The Log of the configuration wizard shows this: "2009-04-15 14:24:52.67 +02" "Microsoft.Clm.Config.Core.ConfigHelper" "Boolean IsCurrentUserLocalAdmin()" "" "VI-QA-28-X64-01\administrator" 0x00000FE0 0x00000001 Check if current user is local admin "2009-04-15 14:24:52.72 +02" "Microsoft.Clm.Config.Core.ConfigHelper" "Boolean IsCurrentUserDomainAdmin()" "" "VI-QA-28-X64-01\administrator" 0x00000FE0 0x00000001 Check if current user is domain admin "2009-04-15 14:24:52.76 +02" "Microsoft.Clm.Config.Core.ConfigHelper" "Void LoadWebConfig()" "" "VI-QA-28-X64-01\administrator" 0x00000FE0 0x00000001 ConfigHelper - Loading web config "2009-04-15 14:24:52.76 +02" "Microsoft.Clm.Config.Core.ConfigHelper" "System.String get_InstallDirectory()" "" "VI-QA-28-X64-01\administrator" 0x00000FE0 0x00000001 The installation folder C:\Program Files\Microsoft Certificate Lifecycle Manager\ does not exist. "2009-04-15 14:24:52.77 +02" "Microsoft.Clm.Config.Core.ConfigHelper" "Microsoft.Clm.Config.Core.NameValueSection LoadFromFile(System.String)" "" "VI-QA-28-X64-01\administrator" 0x00000FE0 0x00000001 Loading settings from file 'C:\Program Files\Microsoft Certificate Lifecycle Manager\web\web.config'.

The log says:"C:\Program Files\Microsoft Certificate Lifecycle Manager\ does not exist"That folder should exist after running CLM setup. I'd verify the folder exists, maybe something failed during setup.CraigMartin Oxford Computer Group http://identitytrench.com

In addition to Craig's suggestion if the folder actually exists post-setup you may want to check the permissions on the folder.Paul Adare CTO IdentIT Inc. ILM MVP

The folder exists, and administrator has full access. The logfile is written to that directory. and in the next line from the log you can see that it loads web.config from that path.if that folder wont exist , i cant call the configuration because the software is installed in that path.has someone installed ilc2 rc0 ( clm server) to windows 2008 64 bit. Because for the moment i think this doesnt work. :-(

The folder exists, and administrator has full access. The logfile is written to that directory. and in the next line from the log you can see that it loads web.config from that path.if that folder wont exist , i cant call the configuration because the software is installed in that path.has someone installed ilc2 rc0 ( clm server) to windows 2008 64 bit. Because for the moment i think this doesnt work. :-( I have and it works just fine here.Paul Adare CTO IdentIT Inc. ILM MVP

I have and it works just fine here. Paul Adare CTO IdentIT Inc. ILM MVP Same here. To answer the original question, yes we did test it on 64 bit Windows Server 2008.AhmadAW

so there is a little light on the end of the tunnel that i can get it running too ;-)perhaps i try it with a fresh install. But i prefer to find the problems on the system. But i cant find anything....any idea how i can check the active directory ?Thank you for your help

I had to run the config wizard from an elevated command prompt when I did the install with RC0 (build 2175)BrjannThis posting is provided "AS IS" with no warranties, and confers no rights

Chriswal999, any updates on your issue?BrjannThis posting is provided "AS IS" with no warranties, and confers no rights

perhaps i try it with a fresh install. But i prefer to find the problems on the system. But i cant find anything....any idea how i can check the active directory ? Another thing to consider is whether you are installing the portal on a server that is in a different domain than the agent user accounts you've specified. If it is, this was a known issue in the release candidate. If not, then the UAC seems to be the most likely cause of the error.AhmadAW

Sorry for the late reply, i am again in the office this week on thursday, so i couldnt try anything.UAC should make no problem because it is switched off. it is all installed on the same server. i can access the ilm pages (also clm webinterface is running, but when i try to access i get an error because it is not configured). the only problem is, that the configuration wizard is not running becauseit tells me that the modification to the AD has to be done before setup.but i have done the modification, and i checked that it is in the AD. If you have any information how to check the schema extension of AD let me know.

IF you can see the extended "CLM-*" permissions on a user or group, your AD schema has been updated.AhmadAW

and if you can't you might want to run the schema modification on the DC.AhmadAW

thank you for your replies. we are working on a smart card software, and the release of this version is in the rc phase ..so we moved the support of ilm2 to the next version starting dev soon. i had to prepare a lot of configurations for testing ...so perhaps i will try again when i have to clean up our vm server from failed clm2 tries ;-)i will give a reply when i tested it.regardsChristian