Re: msxml3.dll error '80072f0c' A certificate is required to complete

From: David Wang [Msft] (someone_at_online.microsoft.com)
Date: 03/10/05


Date: Wed, 9 Mar 2005 20:12:47 -0800

The KB does not indicate that it applies to IIS6/SBS2003, and thank you for
validating it. I will check and make sure that this KB gets updated to
include IIS6.

The error you are getting indicates that ServerXMLHTTP does not have a
client certificate to make SSL requests. As the KB indicates, the procedure
completely depends on the process identity as to which user you are supposed
to perform the procedure on. This is because the certificate depends on the
user identity that is retrieving the "client certificate" (i.e. when I
retrieve my "client certificate" on the machine it better be mine, not
yours, and vice versa).

The KB assumed IIS4/5/5.1 and high/medium isolation (default values for
those servers, respectively) and gave instructions on how to configure
certificates for IWAM_machinename.

However, IIS6 on SBS2003 is completely different from prior IIS versions and
does not use IWAM_machinename by default at all, so the instructions,
verbatim, are useless.

Based on the article, I'd guess that you need to do the exact same
procedure, but with the configured Application Pool Identity (instead of
IWAM_machinename). This should be Network Service by default, unless your
web application is running in an Application Pool with a different process
identity.

-- 
//David
IIS
http://blogs.msdn.com/David.Wang
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Alphanova Development" <Alphanova Development@discussions.microsoft.com>
wrote in message news:BD0FE4B0-BA21-47D7-BDAC-057C5BFD71DA@microsoft.com...
I have followed the Microsoft instructions How to install client certificate
on IIS Server for ServerXMLHTTP request object.
(http://support.microsoft.com/default.aspx?scid=kb;EN-US;q301429).
But it doesn't seems to be working correctly in windows 2003 small business
server
NOTE: IT WORKS WINDOWS XP Professional
I am getting this error message below
msxml3.dll error '80072f0c'
A certificate is required to complete client authentication
I am using this code to invoke server url through https.
Set objXmlHttp = Server.CreateObject("Msxml2.ServerXMLHTTP")
PostURL = "A030=M005&A001=1266&C007=" & Request.Item("refno") &
"&C013=&A061=10&A105=9782&C005=540&C001=0&C003=4151700000001051&C004=200505&
C042=0"
objXmlHttp.open "POST", "https://cer.pnet.multibanco.pt/servlet/pvtn", false
objXmlHttp.setRequestHeader "Content-Type",
"application/x-www-form-urlencoded"
'objXmlHttp.setOption(3) = "0000001266"
objXmlHttp.send PostURL
strMBNet = objXmlHttp.responseText


Relevant Pages

  • RE: script fails first time with "accept client certificates"
    ... I'm not using a client certificate, ... I tried with a Windows 2000 and Windows 2003 server, ... some kb articles may help ...
    (microsoft.public.inetserver.iis.security)
  • RE: The remote certificate is invalid according to the validation proc
    ... the webservice is protected through https/ssl. ... you also add client certificate in your ... try accessing the server service to see ... SSL certificate or the servername you used to access the server. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • How do I require a client certificate when publishing a Web server?
    ... We have an internal web server that we want to publish to the Internet. ... The ISA Server is not part of a domain. ... If I set authentication on the SSL listener to SSL Client Certificate Authentication, the client is prompted for the certificate and then gets the error: "Error Code: 401 Unauthorized. ...
    (microsoft.public.isa.publishing)
  • How do I require a client certificate when publishing a Web server?
    ... We have an internal web server that we want to publish to the Internet. ... The ISA Server is not part of a domain. ... If I set authentication on the SSL listener to SSL Client Certificate Authentication, the client is prompted for the certificate and then gets the error: "Error Code: 401 Unauthorized. ...
    (microsoft.public.isa.configuration)
  • Re: require client certificates SSL
    ... I read that a client certificate can be made by exporting the certificate on ... them, and they install the certificate, will they trust my CA server then? ... Best Practices for Implementing a Microsoft Windows Server2003 Public ...
    (microsoft.public.inetserver.iis.security)