PRB: BizTalk: Error 0x8009030D Encrypting and Sending Data to a Partner (289824)

SYMPTOMS

An error message may occur when a user attempts to send data to a partner. If the partner requires that the data be encrypted with a certificate, the following error message occurs:

An error occurred in BizTalk Server.

Details:
------------------------------
An error occurred during transmission:
The specified client certificate cannot be loaded.
Request information:

Proxy:
Proxy port:80
URL:https://server/biztalk/receivestandard.asp
Content-Type:text/xml; charset="utf-8"
User name:
Client certificate:User_A@microsoft.com, US, WA, Redmond, "Microsoft, Interoperability Testing Only", "Microsoft, Interoperability Testing Only", User A
Request body:3146 Bytes
Timeout duration (seconds): 99
Error code:8009030d

The server encountered a transport error while processing the messaging port "User A Certificate Test", which uses a transport component with a ProgID of "BizTalk.SendHTTPX.1".

Suspended Queue ID: "{B365E040-E11B-47BE-A4AF-7354E6882F91}"

CAUSE

This is a security issue related to the access rights to the certificates. Only users who create or import the certificates have access to that certificate. By default, the BizTalk Messaging Service is configured to run as the LocalSystem account. This account does not have access to the certificate and therefore cannot encrypt and deliver the message.

RESOLUTION

To work around this issue, run the BizTalk Messaging Service using a Service Account. A Service Account is a normal user account that is used with a server service to allow the service to function as a specific user. The user account should be the same user account used to create and/or import certificates to your BizTalk Server computer.

REFERENCES

For more information about Microsoft Windows 2000 Security and Encryption Certificates, please refer to the following Web address:

Microsoft Technet Security