Getting 500 Error from /add-certificate

[bryanllewis]

I believe that I have followed all of the Getting Started instructions correctly, but I am getting an error from the /add-certificate web interface. I can see the domain that I want, pick it, add my subdomain and click Submit. Shortly after I get a "Error: request failed with status code 500" popup message.

When I look through the logs of the various functions, there are errors on two (details below).

Any thoughts?
Thanks,
Bryan

FinalizeOrder: Operation returned an invalid status code 'Forbidden'

IssueCertificate: Orchestrator function 'IssueCertificate' failed: The activity function 'FinalizeOrder' failed: "Failed to deserialize exception from TaskActivity: {"$type":"Microsoft.Azure.KeyVault.Models.KeyVaultErrorException, Microsoft.Azure.KeyVault","Request":{"$type":"Microsoft.Rest.HttpRequestMessageWrapper, Microsoft.Rest.ClientRuntime","Method":{"$type":"System.Net.Http.HttpMethod, System.Net.Http","Method":"POST"},"RequestUri":"https://myvault.vault.azure.net//certificates/api-onpass-pro/creat...

[shibayan]

It looks like you’re having trouble accessing Key Vault. Review the Access Policy settings.
https://github.com/shibayan/keyvault-acmebot#5-add-a-access-policy-only-when-using-an-existing-key-vault

[bryanllewis]

@shibayan , I had completed this step, but I removed and re-added the access policy and it worked. So something was off in Azure. Thanks.