Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

KeySignTest : FAILED (transport key) #82

Open
dkschruteBeets opened this issue Jan 31, 2024 · 1 comment
Open

KeySignTest : FAILED (transport key) #82

dkschruteBeets opened this issue Jan 31, 2024 · 1 comment

Comments

@dkschruteBeets
Copy link

dkschruteBeets commented Jan 31, 2024

Any ideas on how to resolve this failure? I'm currently testing Azure AD join using the following snippet:

Get-AADIntAccessTokenForAADJoin -Credentials $credential -SaveToCache
Join-AADIntDeviceToAzureAD -DeviceName $computerName -DeviceType "Windows" -OSVersion $version
Join-AADIntLocalDeviceToAzureAD -UserPrincipalName $username -PfxFileName .\a16d9283-379f-4ff1-af28-28e763a7393c.pfx

Once I reboot and sign in with an Azure account, I'm greeted with a "Contact your IT admin" pop up and the transport key failure when running dsregcmd /status.

Much appreciated!

@dkschruteBeets
Copy link
Author

I don't know if this is related but it seems that running Export-AADIntLocalDeviceTransportKey results in the following error:

Exception calling "copyLsassToken" with "0" argument(s): "Access is denied"
At C:\Program Files\WindowsPowerShell\Modules\AADInternals\0.9.3\CommonUtils.ps1:1787 char:20
+                 if([AADInternals.Native]::copyLsassToken())
+                    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [], MethodInvocationException
    + FullyQualifiedErrorId : Win32Exception

Transport key exported to ef5daede-5444-4826-93f9-5a888394a52e_tk.pem

Just figured I'd mention it in case it's a potential smoking gun.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant