VMMExpress - Deployment issue about sdn

[PnoT]

Issue:
[2023-12-22T11:36:19.9824919-08:00]Adding to local admin group..
[2023-12-22T11:36:22.3956947-08:00]Attempt 1 - Adding to Administrators group
[2023-12-22T11:36:22.4269519-08:00]Successfully added to Administrators group.
[2023-12-22T11:36:22.4269519-08:00]Adding trusted hosts
[2023-12-22T11:36:22.9113631-08:00]Finding certificate file in script directory. 'C:\NCInstall\certificate-ssl'
[2023-12-22T11:36:22.9426161-08:00]Error: Did not find an SSL certificate file deployed to VM.
[2023-12-22T11:36:22.9426161-08:00] Please create a valid certificate and include in the SSL certificate.cr "

Solution: Set the option to generate a self-signed cert to $true as I did not have a CA

After enabling the option, I ran into this problem:

Reason: CertEnroll::CX509Enrollment::_CreateRequest: Access is denied. 0x80070005 (WIN32: 5 ERROR_ACCESS_DENIED)

Solution: Run Virtual Machine Manager Command Shell with Administrator rights. I must have closed out of the window
and accidentally reopened the session as a non-admin so the cert generation would fail.

Issue:

VMName while onboarding NC : [NCE-NCVM01.lab.dmz]
COnnection String :
The deployment was not successful.
Reason: Execution of :: on the configuration provider failed. Detailed exception: Unable to connect to the network service. Check connection string and network connectivity. Execution of Microsoft.SystemCenter.NetworkService::OpenDeviceConnectionEx on the configuration provider 3e2875a7-5831-4fb2-b388-1672e1c20fee failed. Detailed exception: Microsoft.VirtualManager.NCRestApiWrappers.NCRestApiWrappersException:
Check the documentation for the configuration provider or contact the publisher support.
Unable to connect to the network service. Check connection string and network connectivity. (Error ID: 21426)

Solution: This issue has popped up a bunch from various users, and after troubleshooting, the credentials being used are not enough to connect correctly to the network controller. The function "OnBoardNetworkController" uses the credentials for "NC_MgmtAdminRAA" but if you manually go into SCVMM and try to add the controller with the runas account, you'll see that it does connect but shows "false" to all of the features and eventually will fail to add. Here is how the window is supposed to look https://www.tech-coffee.net/wp-content/uploads/2015/08/082115_1315_Deployandad13.png?w=620&ssl=1 You can see "True" for most of the properties. I'm trying to understand why this happens, but using my domain admin account resulted in it being added correctly. I want to get to the bottom of this because using my credentials is not ideal, and this is in my home lab for now.

These issues are the results of the credentials not working as well.
#492
#495

[DCoates-InnovateLtd]

what OS and what edition are you running for your network controllers? if the role isnt found its only a Datacenter roll. also if your using SCVMM check your template for the VM is setup correctly.