Cannot bind a SSL certificate to a port from withing a LocalSystem AppPool application

• Monday, June 18, 2012 3:29 PM

   

   
  

  0

  I'm having some trouble binding a SSL certificate to a specific port using the following command:

  netsh http add sslcert ipport=0.0.0.0:8091 certhash=861CEA13D9F0DB7054D8826D9983DBECEC600B3C appid={08DD83F6-854A-4BFF-92AB-04878DB3915B}

  When I run this command from cmd.exe as Administrator it works perfectly.

  When I try to run it from an ASP.NET application that runs in a LocalSystem AppPool (which has full Administrator privileges) I get the following error -

  SSL Certificate add failed, Error: 1312
  A specified logon session does not exist. It may already have been terminated.

  And in the Securty Event Log it is logged the following error:

  A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x8009030d. The internal error state is 10001.

  The OS is Windows 2008 R2 SP1, so that hotfix from Microsoft won't work (is already installed). I don't understand if it is a permissions issue, since both times the command is executed under the Administrator account. The same thing works fine on a Windows 7 x64 dev machine.

  Any ideas how to make it work from within the ASP.NET app?

  • Reply
  • Quote