This fixed my issue: Under splunk\etc\auth rename it to server.pem to server.pem.old and restart splunk Service No more warnings and in https://localhost:8089/services/server/info and kvStoreStatus is showing "ready" ... View more

@NotSure Unfortunately reverting a snapshot is not an option due to the nature of the logging we use splunk in our environment. ... View more

@NotSure I get an error saying this version of Splunk is already installed when i try to rerun v9 setup under splunk service account. Did you do a repair? ... View more

@NotSure Did you re-run the setup under the splunk service account? Also can you confirm what exact certificate did you give permission to? I initially ran the install under a domain admin and getting failed to read certificate. ... View more

Service account has full control to the $SPLUNK_HOME/etc/auth. Service account has local admin rights to the splunk server. ... View more

Same issue on Windows Server 2019 after upgrading from 8.2.6 to 9.0. Confirmed certificates have are not expired and using default certificates. Failed global initialization: InvalidSSLConfiguration: Could not read private key attached to the selected certificate, ensure it exists and check the private key permissions ... View more