THIS IS ARCHIVED DOCUMENTATION

Configuration Wizard error - Unable to add the certificate to the Root store. Access is denied.

This is for:

Developer System Administrator

Symptoms

When installing the Coveo for Sitecore package and checking Use a secure Admin Service in the Configuration Wizard, you may get the following error:

Causes

To be able to import the specified certificate, Coveo for Sitecore needs to impersonate the administrator account that you specified, so the error may have one of the following causes:

  1. The user account that you specified may not be a member of the local Administrators group.
  2. If UAC is enabled, importing the certificate requires that the administrator account also has elevated privileges, which is impossible while impersonating a user.

Resolution

  1. Make sure that the user account that you specified is a member of the local Administrators group.
  2. If UAC is enabled, you need to temporarily disable it by using this method.
    1. Log into the Sitecore server.
    2. Open the Registry Editor (regedit.exe).
    3. Expand the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
    4. Modify the value of EnableLUA to 0x00000000.
    5. Restart the server.
      1. Coveo for Sitecore (April 2017) Reconfigure the Admin Service through the Sitecore Control Panel, see Configuring the Admin Service After Install.
      2. For earlier releases, reinstall the Coveo for Sitecore package using the Sitecore Installation Wizard. There shouldn’t be any error anymore.
    6. Using the Registry Editor, modify the value of EnableLUA to 0x00000001.

    7. Restart the server.

      Lowering the User Account Control Settings slider to Never notify isn’t enough, as UAC is still enabled when you do so.