Critical Error while attempting to load the CA forest details. The error that appears on the Certificates>Certificate Authority tab when it is selected below.
An error occurred while attempting to load the CA forest details.
One or more errors occurred.
Index was out of range. Must be non-negative and less than the size of the collection.
Parameter name: index
at System.Collections.ArrayList.get_Item(Int32 index)
at System.DirectoryServices.ResultPropertyValueCollection.get_Item(Int32 index)
at Quest.AA.AFS.ASM.CertificateMgmt.CertAuthority.CAForestProvider.GetTemplates(DirectoryEntry rootDe)
at Quest.AA.AFS.ASM.CertificateMgmt.CertAuthority.CAForestProvider.GetForest(CAForestSettings forest)
at Quest.AA.AFS.RequestHandlers.CARequestHandler.GetCAForest(CAForestSettings forestSettings)
Server stack trace:
at System.ServiceModel.Channels.ServiceChannel.ThrowIfFaultUnderstood(Message reply, MessageFault fault, String action, MessageVersion version, FaultConverter faultConverter)
at System.ServiceModel.Channels.ServiceChannel.HandleReply(ProxyOperationRuntime operation, ProxyRpc& rpc)
at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)
at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)
at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)
Exception rethrown at [0]:
at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)
at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)
at Quest.AA.Shared.WCF.IAFSService.GetCAForest(CAForestSettings forestSettings, String afsAccessKey)
at Quest.AA.Shared.ServiceAgents.CAServiceAgent.GetCAForest(CAForestSettings forestSettings)
at Quest.AA.Console.Certificates.CertAuthority.CertAuthorityViewModel.<LoadForest>b__21_0()
at System.Threading.Tasks.Task.Execute()
When we are reading the certificate templates we expect certain values to be present in all certificate templates, and there are templates in the environment missing some of these properties. This causes an indexing error when we try to read property from the AD object and the property does not exist.
We have created a defect ID to have this corrected in a future version of Active Administrator. The defect ID is 609585.
Currently there is no workaround for this issue.
