I'm in the process of renewing the self-signed certificates on our tenant, session and web servers. I've generated new certificates, and exported and imported to each server. I successfully ran the repair from Programs and Features on the tenant server to select the new certificate but when I try the repair on the web and session server I receive the attached error. I've tried running the repair using a domain admin account and the GP service account that the services run under.
The error reads "The account running the installation is not a valid service administrator of the Discovery Service. The account running the installation is not a valid service administrator of the Management Service."
