Possible solution to "Error: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account mus t be configured to allow delegation. (Exception from HRESULT: 0x80090345)" when installing tentacle in

Legacy Execution
1

Hi! I ran into this really annoying problem where we get this error message when installing a tentacle on a server in DMZ:
“Error: The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation. (Exception from HRESULT: 0x80090345)”

I found four threads in the forum here but none really solved the problem (at least for us).
http://help.octopusdeploy.com/search?utf8=✓&q="the+computer+must+be+trusted+for+delegation+and+the+current+user+account"&t=d&scope=all&category_id=

Today our operations team found a possible solution to this problem. It seems to be related to that the masterkey can’t be handled properly in some way when in DMZ:

“To work around this problem, set the value of the ProtectionPolicy registry entry to 1 to enable local backup of the MasterKey instead of requiring a RWDC in the following registry subkey:
HKEY_LOCAL_MACHINE\Software\Microsoft\Cryptography\Protect\Providers\df9d8cd0-1501-11d1-8c7a-00c04fc297eb”

https://social.technet.microsoft.com/Forums/windows/en-US/47faab6b-d717-4068-bee4-c694811e0066/credential-manager-problems-error-0x80090345?forum=w8itpronetworking

I’m not sure what the side effects are for setting this key so tread with caution.

Regards, Daniel

1 Like
2

Thanks a lot for the suggestion Daniel.

Regards,
Mark