"Keyset does not exist" error when you try to run the PSConfig Wizard in SharePoint 2010

Article translations Article translations
Article ID: 2781614 - View products that this article applies to.
Expand all | Collapse all


In Microsoft SharePoint 2012, you try to run the PSConfig Wizard. However, at step 3 in the wizard, you receive the following error:
System.Security.Cryptography.CryptographicException: Keyset does not exist
Additionally, an event that resembles the following is logged in the Application log:

Log Name: Application
Source: SharePoint 2010 Products Configuration Wizard
Date: <Date and Time>
Event ID: 104
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: <Servername>

Failed to connect to the configuration database. An exception of type System.Security.Cryptography.CryptographicException was thrown. Additional exception information: Keyset does not exist System.Security.Cryptography.CryptographicException: Keyset does not exist at System.Security.Cryptography.Utils.CreateProvHandle(CspParameters parameters, Boolean randomKeyContainer) at System.Security.Cryptography.Utils.GetKeyPairHelper(CspAlgorithmType keyType, CspParameters parameters, Boolean randomKeyContainer, Int32 dwKeySize, SafeProvHandle& safeProvHandle, SafeKeyHandle& safeKeyHandle) at System.Security.Cryptography.RSACryptoServiceProvider.GetKeyPair() at System.Security.Cryptography.RSACryptoServiceProvider..ctor(Int32 dwKeySize, CspParameters parameters, Boolean useDefaultKeySize) at System.Security.Cryptography.X509Certificates.X509Certificate2.get_PrivateKey() at Microsoft.SharePoint.Utilities.CertificateManager.ReleaseCertificate(X509Certificate2 certificate) at Microsoft.SharePoint.Administration.SPCertificateAuthority.Issue(X500DistinguishedName subjectName, DateTime notBefore, DateTime notAfter, X509ExtensionCollection extensions) at Microsoft.SharePoint.Administration.SPCertificateAuthority.Issue(String subjectName, X509ExtensionCollection extensions) at Microsoft.SharePoint.Administration.SPIisWebServiceSettings.ProvisionLocalSslCertificate() at Microsoft.SharePoint.Administration.SPIisWebServiceSettings.ProvisionLocal(SPIisWebServiceSettingsProvisioningOptions options) at Microsoft.SharePoint.Administration.SPIisWebServiceInstance.Provision() at Microsoft.SharePoint.Administration.SPFarm.Join() at Microsoft.SharePoint.PostSetupConfiguration.ConfigurationDatabase


The Service status is Stopped for the Protected Storage service.


Start the Protected Storage service, and run the PSConfig Wizard.

More information

For more information about Protected Storage, go to the following MSDN website:


Article ID: 2781614 - Last Review: November 9, 2012 - Revision: 1.0
Applies to
  • Microsoft SharePoint Foundation 2010
  • Microsoft SharePoint Server 2010
  • Microsoft SharePoint 2010 For Internet Sites Standard
  • Microsoft SharePoint 2010 For Internet Sites Enterprise

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com