Data not uploaded to storage and index not created due to errors with AzureDeveloperCliCredential not found and SSL certificate error

[SonalPrabhune]

(Auto-closed as obsolete; see final comment for details).

[vhvb1989]

had to be installed explicitly

There a .sh and .ps1 file within the /scripts folder to launch the prepdocs.py
These scripts take care of creating a python virtual environment and installing all dependencies before running the python app.

If you are using Windows, try running the ps1 file from powershell7

[SonalPrabhune]

Yes that’s the one I have been using all along, the power shell script, .ps1. Why do I still keep getting the certificate error?

[vhvb1989]

The error on your logs:

subprocess.CalledProcessError: Command '['cmd', '/c', 'az account get-access-token --output json --resource https://search.azure.com --tenant ']' returned non-zero exit status 1.

It looks like there's a call to az which is failing. Do you have az installed?

Note: az and azd does not share the same authentication. This means that if you have az login to another account, it might be failing when it is been called. You can try running az logout so it is not used as source of auth. Then try running again.

[SonalPrabhune]

Thanks for your input. I installed az and then tried to login but I get the certificate error for that as well. What kind of authentication is required for that? My azd login is successful, but if az and azd don't share the same authentication, how do I configure az for Azure services?
Here's what I did. I have confirmed that my proxy is still disabled like in my previous screenshot. Also, 'azd login' command takes me to browser to confirm my username and pwd but 'az login' command did not do so.
PS C:\Users<my-path>\azure-search-openai-demo-main> pip install az
Collecting az
Downloading az-0.1.0.dev1-py3-none-any.whl (1.5 kB)
Installing collected packages: az
Successfully installed az-0.1.0.dev1
PS C:\Users<my-path>\azure-search-openai-demo-main> az logout
HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max retries exceeded with url: /organizations/v2.0/.well-known/openid-configuration (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)')))
Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.
PS C:\Users<my-path>\azure-search-openai-demo-main> az login
HTTPSConnectionPool(host='login.microsoftonline.com', port=443): Max retries exceeded with url: /organizations/v2.0/.well-known/openid-configuration (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate in certificate chain (_ssl.c:997)')))
Certificate verification failed. This typically happens when using Azure CLI behind a proxy that intercepts traffic with a self-signed certificate. Please add this certificate to the trusted CA bundle. More info: https://docs.microsoft.com/cli/azure/use-cli-effectively#work-behind-a-proxy.

I tried this approach as well after reading Microsoft documentation
PS C:\Users<my-path>\azure-search-openai-demo-main> Install-Module -Name Az

Untrusted repository
You are installing the modules from an untrusted repository. If you trust this repository, change its InstallationPolicy value by running the Set-PSRepository cmdlet. Are you sure you want
to install the modules from 'PSGallery'?
[Y] Yes [A] Yes to All [N] No [L] No to All [S] Suspend [?] Help (default is "N"): Y
Install-Package: The following commands are already available on this system:'Login-AzAccount,Logout-AzAccount,Resolve-Error,Send-Feedback'. This module 'Az.Accounts' may override the existing commands. If
you still want to install this module 'Az.Accounts', use -AllowClobber parameter.
PS C:\Users<my-path>\azure-search-openai-demo-main> Login-AzAccount
Connect-AzureRmAccount: Could not load type 'System.Security.Cryptography.SHA256Cng' from assembly 'System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089'.

I have also done this

After installing Install-Module Az
And I ran 'Connect-AzAccount'

Account SubscriptionName TenantId Environment
xxxx Visual Studio Enterprise Subscription xxx AzureCloud
when I tried running command 'az login --identity'
I get the following error
Failed to connect to MSI. Please make sure MSI is configured correctly and check the network connection.
Error detail: HTTPConnectionPool(host='169.254.169.254', port=80): Max retries exceeded with url: /metadata/identity/oauth2/token?resource=https%3A%2F%2Fmanagement.core.windows.net%2F&api-version=2018-02-01 (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x04E65AA8>: Failed to establish a new connection: [WinError 10051] A socket operation was attempted to an unreachable network'))

Also I dont have any Managed Certificates

What else do I need to do?

[pauldj54]

Hi @SonalPrabhune ,
I'm running into the same issues. I would like to ask you if you managed to solve them?

[MSavka]

Hi guys, if someone still has the same issue or #79, and you have the "Owner" role assigned, etc. - the problem is in the ".../scripts/prepdocs.ps1" file, line 39, actually here:

$cwd = (Get-Location)
Start-Process -FilePath $venvPythonPath -ArgumentList "./scripts/prepdocs.py $cwd/data/* --storageaccount ...

, and this parameter: $cwd/data/* in the code above. You can quickly notice (Windows OS) that if your folder/path with the project contains spaces, the whole line will be parsed incorrectly and not executed (but this Python script actually uploads PDF documents in chunks and creates the necessary search index).

So the easiest fix - is to move the project into some folder without spaces (whole path), wrap this parameter with some quotes, or use a variable. Also (ideally), you need to replace slashes in the opposite direction for this path (so it will be $cwd\data\* ). That's all, hope it will help somebody )

[github-actions]

This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this issue will be closed.

[pamelafox]

Closing as obsolete.

Thanks for reporting this originally and to everyone who added context. The ingestion and indexing flow has since been updated:

• Current scripts/prepdocs.ps1 / scripts/prepdocs.sh create the virtual environment, install all dependencies, and invoke prepdocs.py directly (no manual per‑package installs needed).
• The PowerShell script now quotes the data glob ("$cwd/data/*"), avoiding the earlier Windows path + spaces parsing issue noted in later comments.
• AzureDeveloperCliCredential is now included and referenced consistently across scripts and tests; the original ImportError should no longer occur with the present dependency set.
• The remaining SSL certificate failures were environmental (corporate proxy / self‑signed cert trust chain) rather than a defect in the sample. Guidance for proxy/cert handling is covered in Azure CLI docs linked in the original error output.

If you can still reproduce a failure with the latest main branch and a trusted certificate chain, please open a new issue with:

1. Exact command you ran (script vs direct python invocation)
2. OS + shell
3. az version output and whether az login succeeds independently
4. Any proxy or custom cert details (sanitized)

Appreciate the contribution—feel free to open a fresh issue if something similar crops up in the current codebase.