Error 500 on Windows Azure Pack (WAPack) Admin Portal

I’ve been playing around with Windows Azure Pack and I’ve deleted all self-signed certificates from the personal store. Apparently I’ve missed some configuration and WAP{ was still using them. After deleting the certificates when I’ve opened the Admin Portal I’ve got white page with Error 500 displayed on it.

To get clear description of the issue I’ve opened the WAP event logs and the following errors were logged:

– System

  – Provider

   [ Name]  Microsoft-WindowsAzurePack-MgmtSvc-WindowsAuthSite
[ Guid]  {0F6CC87B-DB81-49B2-8C49-3A677668CE01}

EventID 12

Version 0

Level 2

Task 65522

Opcode 0

Keywords 0x0

• TimeCreated

   [ SystemTime]  2014-03-24T07:56:59.013740200Z

EventRecordID 1943

Correlation

• Execution

   [ ProcessID]  1940
[ ThreadID]  1476

Channel Microsoft-WindowsAzurePack-MgmtSvc-WindowsAuthSite/Operational

Computer Wap.contoso.com
– Security

   [ UserID]  S-1-5-82-2549926429-2988919198-231587694-2103424236-3831772697

– EventData

  message Unhandled exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.WindowsAzure.Server.Authentication.Controllers.WSFederationController.Metadata() at lambda_method(Closure , ControllerBase , Object[] ) at System.Web.Mvc.ReflectedActionDescriptor.Execute(ControllerContext controllerContext, IDictionary2 parameters) at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethod(ControllerContext controllerContext, ActionDescriptor actionDescriptor, IDictionary2 parameters) at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass42.<BeginInvokeSynchronousActionMethod>b__41() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.<BeginInvokeActionMethodWithFilters>b__33() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.<InvokeActionMethodFilterAsynchronously>b__49() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<>c__DisplayClass2a.<BeginInvokeAction>b__20() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<BeginInvokeAction>b__22(IAsyncResult asyncResult) at System.Web.Mvc.Controller.<>c__DisplayClass1d.<BeginExecuteCore>b__18(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar) at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar) at System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult) at System.Web.Mvc.MvcHandler.<>c__DisplayClass8.<BeginProcessRequest>b__3(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar) at System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
requestId
subscriptionId
clientRequestId
principalId
version
pageRequestId
acceptLanguage
operationName

 

– System

  – Provider

   [ Name]  Microsoft-WindowsAzurePack-MgmtSvc-WindowsAuthSite
[ Guid]  {0F6CC87B-DB81-49B2-8C49-3A677668CE01}

EventID 12

Version 0

Level 2

Task 65522

Opcode 0

Keywords 0x0

• TimeCreated

   [ SystemTime]  2014-03-24T07:52:20.289550500Z

EventRecordID 1942

Correlation

• Execution

   [ ProcessID]  1940
[ ThreadID]  5940

Channel Microsoft-WindowsAzurePack-MgmtSvc-WindowsAuthSite/Operational

Computer wap.contoso.com

• Security

   [ UserID]  S-1-5-82-2549926429-2988919198-231587694-2103424236-3831772697

– EventData

  message Unhandled exception: System.NullReferenceException: Object reference not set to an instance of an object. at Microsoft.WindowsAzure.Server.Authentication.Controllers.WSFederationController.SignIn(SignInRequestMessage message, ClaimsPrincipal principal) at Microsoft.WindowsAzure.Server.Authentication.Controllers.WSFederationController.Issue() at lambda_method(Closure , ControllerBase , Object[] ) at System.Web.Mvc.ReflectedActionDescriptor.Execute(ControllerContext controllerContext, IDictionary2 parameters) at System.Web.Mvc.ControllerActionInvoker.InvokeActionMethod(ControllerContext controllerContext, ActionDescriptor actionDescriptor, IDictionary2 parameters) at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass42.<BeginInvokeSynchronousActionMethod>b__41() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<>c__DisplayClass39.<BeginInvokeActionMethodWithFilters>b__33() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass4f.<InvokeActionMethodFilterAsynchronously>b__49() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass37.<BeginInvokeActionMethodWithFilters>b__36(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<>c__DisplayClass2a.<BeginInvokeAction>b__20() at System.Web.Mvc.Async.AsyncControllerActionInvoker.<>c__DisplayClass25.<BeginInvokeAction>b__22(IAsyncResult asyncResult) at System.Web.Mvc.Controller.<>c__DisplayClass1d.<BeginExecuteCore>b__18(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar) at System.Web.Mvc.Controller.EndExecuteCore(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar) at System.Web.Mvc.Controller.EndExecute(IAsyncResult asyncResult) at System.Web.Mvc.MvcHandler.<>c__DisplayClass8.<BeginProcessRequest>b__3(IAsyncResult asyncResult) at System.Web.Mvc.Async.AsyncResultWrapper.<>c__DisplayClass4.<MakeVoidDelegate>b__3(IAsyncResult ar) at System.Web.Mvc.MvcHandler.EndProcessRequest(IAsyncResult asyncResult) at System.Web.HttpApplication.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
requestId
subscriptionId
clientRequestId
principalId
version
pageRequestId
acceptLanguage
operationName

 

– System

  – Provider

   [ Name]  Microsoft-WindowsAzurePack-MgmtSvc-WindowsAuthSite
[ Guid]  {0F6CC87B-DB81-49B2-8C49-3A677668CE01}

EventID 12

Version 0

Level 2

Task 65522

Opcode 0

Keywords 0x0

• TimeCreated

   [ SystemTime]  2014-03-24T07:52:18.032927500Z

EventRecordID 1941

Correlation

• Execution

   [ ProcessID]  1940
[ ThreadID]  3020

Channel Microsoft-WindowsAzurePack-MgmtSvc-WindowsAuthSite/Operational

Computer wap.contoso.com

• Security

   [ UserID]  S-1-5-82-2549926429-2988919198-231587694-2103424236-3831772697

– EventData

  message Unhandled exception: System.Configuration.ConfigurationErrorsException: Unable to find a unique signing certificate in certificate store. Make sure a certificate exists in the Local Machine\My certificate store and that exactly one certificate matches the configured thumbprint. at Microsoft.WindowsAzure.Server.Authentication.CustomSecurityTokenServiceConfiguration..ctor(IdentityProvider identityProvider, String certificateThumbprint, String authenticationType, IEnumerable1 relyingParties, IEnumerable1 additionalHandlers, ClaimsAuthenticationManager claimsAuthenticationManager) at Microsoft.WindowsAzure.Server.Authentication.CustomSecurityTokenServiceConfiguration.Initialize(IdentityProvider identityProvider, String authenticationType, String certificateThumbprint, IEnumerable1 relyingParties, IEnumerable1 additionalHandlers, ClaimsAuthenticationManager claimsAuthenticationManager) at Microsoft.WindowsAzure.Portal.Authentication.WindowsAuthApplication.Application_Start()
requestId
subscriptionId
clientRequestId
principalId
version
pageRequestId
acceptLanguage
operationName

 

The resolution was simple: I’ve run the run the configuration site of WAP once again with the same SQL credentials and passphrase. The deleted self-signed certificates were restored in the personal store, Admin portal was running once again and no data was lost.