| Previous | Next |
| MQ_ERROR_Q_DNS_PROPERTY_NOT_SUPPORTED | MQ_ERROR_CANNOT_OPEN_CERT_STORE |
MQ_ERROR_CANNOT_CREATE_CERT_STORE
Operational meaning
MQ_ERROR_CANNOT_CREATE_CERT_STORE means current user profile cannot create MSMQ certificate store. Profile loading and store permissions are central; machine-wide certificate changes may be irrelevant.
Authenticated MSMQ messages combine a sender identity, certificate, private key, hash/signature algorithm, and queue policy. When diagnosing this result, successful certificate parsing does not prove that the key is accessible to the sending process.
Encryption capability and message authentication are related but distinct. Preserve provider, algorithm, certificate, key-container, and queue authentication/privacy settings rather than collapsing them into one “SSL” diagnosis.
Where the condition occurs
| Subsystem | MSMQ message authentication, certificate registration, signing, hashing, and encryption |
|---|---|
| Relevant condition | certificate identity, key availability, provider capability, and message policy are independent checks |
| Code-specific focus | current user profile cannot create MSMQ certificate store |
Queue ACLs, certificate trust, private-key access, provider support, and destination authentication policy are independent. Test the layer named by the evidence. The code-specific boundary is current user profile cannot create MSMQ certificate store.
Evidence to preserve
- Certificate store location and security identity used by the process.
- Provider name/type, hash algorithm, and privacy/authentication properties.
- Whether the failure occurred while preparing, sending, storing, or validating the message.
Handling and recovery
Run under the real service identity and grant only the required profile/store access.
Nearby failures
Authentication failure is not synonymous with queue access denial. Certificate stores, private keys, providers, signatures, and queue policy must be tested separately. Code-specific condition: current user profile cannot create MSMQ certificate store.
Worked example
A certificate-registration utility encounters it. It tests store and private-key access under the production identity before changing queue security.
References
Looking for a different code? Search another status or error code.