Dynamic 365 CRM : The private key does not support the exchange KeySpec.

This error occurs when we provide incompatible certificate to dynamic CRM when installing IFD. This error is reported by Dynamic CRM Server application server. We can find the detail exception in event viewer.

Here, I would be presenting the steps where we can generate a certificate which is compatible for Dynamic 365 CRM from scratch. 

If you already know the process of generating the certificate then you just have to select the correct type of Key Type as depicted in below image.

We need to generate certificate from CRM Application Server.

• Open Microsoft Management Console (MMC) on CRM Application server. 
• Click File -> Add/Remove Snap In...
• Add Certificates (Computer Account)
• Navigate to Console Root -> Certificates (Local Computer) -> Personal -> Certificates.
• Create Custom Request

Now follow the wizards as depicted in below screenshots

You can Add following Type Subjects name in Certificates properties based on your organization information

• Common Name
• Organization
• State
• Street Address
• Locality
• Country

Note: You can also provide an alternative name (Domain Name). Choose Type DNS and provide value and click Add button.

After providing all values Subject Tab in certificate properties should look like above image

Save your certificate and proceed further to install it in Dynamic 365 CRM Server. This certificate is used for Non-Commercial & Development purpose.

You can buy the wildcard certificate online from various stores such as - gogetssl.com

Regards,

Vipin Jaiswal

vipinjaiswal12@gmail.com