Rejecting Biztalk X.509 Server Certificates
Our ssl certificate expired recently, so we got a new CA. Unfortunately, when biztalk uses this certificate to access the server, the server rejects it, giving us a 403.17 (Expired or not yet valid) error.
So I checked the dates of the certificate and it seems to be ok. But to actually test if the certificate is working, we loaded it into IE7 and tried to access the server. It works.
Biztalk is looking at the hardcoded location for the certificate, but we have already replaced this file with a new one.
Any idea why when Biztalk tries to access the server it gets rejected?
source to share
We figured out a solution. The problem was accessing the certificate and private key. If you replace the certificate, it is not enough to install it. What for? Because it will only be installed under the current user.
Biztalk runs as user: BizTalkSVC and this account did not have permission to access the certificate.
Once he was granted permission, he ran like a charm!
source to share