Resolve "Unable to find iQuate Authenticode certificate"

In our "Prerequisites document" for installing iQSonar, we mention that Thawte certificates must be trusted. We also give details in Appendix B of the installation guide that, if iQSonar is installed without the Thawte root certificate being installed, the user may encounter that the service fails to start. The service log will contain a series of error messages mentioning "Unable to find iQuate Authenticode certificate" for each of the product adapters, then the service will exit with a message "ERROR - An error occurred when attempting to start the service {iQuate.iQSonar.Server.NotScan/iQuate.iQSonar.Service:0 @iQuate.iQSonar.ScanEngine.exe} System.Exception: An error occurred during server initialisation ---> System.Exception: Unable to find any Product Adapters"

The installation guide gives instructions on how to manually install the certificates from the MSI file.

If the iQSonar server has had the security setting Administrative Tools > Local Security Policy > Security Settings > Local Policies > Security Options > System Cryptography: Use FIPS compliant algorithims for encryption set to enabled, then the instructions in Appendix B are insufficient.

In this case, proceed as follows.

1. Set the local security policy for "Use FIPS Compliant Algorithms..." to DISABLED
2. Double check that the MMC > Local Computer Policy -> Computer Configuration -> Administrative Templates -> System -> Internet Communication Management -> Internet Communication Settings -> Turn Off Automatic Root Certificates Update is set to undefined or DISABLED
3. Install ALL the Thawte root certificates (there are several) from https://www.thawte.com/roots/
4. Install or reinstall the DigiCert Assured ID Root CA from https://www.digicert.com/digicert-root-certificates.htm
5. Uninstall iQSonar
6. Manually install the certificates from the installation MSI as outlined in Appendix B of the install guide
7. Re-install iQSonar
8. Verify that the service starts as expected.