Issue Installing Root CA using Certificate Step

I have created a step to install a certificate variable into the “CA” store.
However, when I run it I receive the following:

16:03:27   Info     |       Importing certificate 'CN=<REMOVED for privacy> CA,O=<REMOVED for privacy>,C=DE' with thumbprint '<REMOVED for privacy>' into store 'CA' for user 'myuser'
16:03:27   Info     |       Imported certificate 'CN=<REMOVED for privacy>, O=<REMOVED for privacy>, C=DE' into store 'S-1-5-21-3025437054-3183595174-3156703335-3681\CA'
16:03:27   Error    |       Calamari.exe : There was an error importing the certificate into the store
16:03:27   Error    |       At E:\Octopus\Work\20200123160324-536568-189\Bootstrap.ps1:27 char:1
16:03:27   Error    |       + &  "${env:TentacleHome}\Calamari\4.21.2\Calamari.exe" import-certific ...
16:03:27   Error    |       + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
16:03:27   Error    |       + CategoryInfo          : NotSpecified: (There was an er... into the store:String) [], RemoteException
16:03:27   Error    |       + FullyQualifiedErrorId : NativeCommandError
16:03:27   Verbose  |       Process C:\Windows\system32\WindowsPowershell\v1.0\PowerShell.exe in E:\Octopus\Work\20200123160324-536568-189 exited with code 1

When I check following this error, the certificate DOES appear in the Intermediate Authority store. I suspect there is something a little odd with this CA because when I import it in windows (without specifying a store) it imports to the same place. HOWEVER, I am specifying the CA store in Octopus so I would expect it to not install to the IA store.

I figured this out in the end, I needed to select “Root” as the store and then the certificate ended up in the correct place.

Great to hear that you got this sorted out @andrew_norfolk!

I’m sure our other forumgoers will appreciate seeing how you resolved this, should they encounter the same problem in the future!

Happy deployments!