PRB: BizTalk: Error 0x8009030D Encrypting and Sending Data to a Partner

View products that this article applies to.

This article was previously published under Q289824

Symptoms

An error message may occur when a user attempts to send data to a partner. If the partner requires that the data be encrypted with a certificate, the following error message occurs:

An error occurred in BizTalk Server.

Details:
------------------------------
An error occurred during transmission:
The specified client certificate cannot be loaded.
Request information:

Proxy:
Proxy port:80
URL:https://server/biztalk/receivestandard.asp
Content-Type:text/xml; charset="utf-8"
User name:
Client certificate:User_A@microsoft.com, US, WA, Redmond, "Microsoft, Interoperability Testing Only", "Microsoft, Interoperability Testing Only", User A
Request body:3146 Bytes
Timeout duration (seconds): 99
Error code:8009030d

The server encountered a transport error while processing the messaging port "User A Certificate Test", which uses a transport component with a ProgID of "BizTalk.SendHTTPX.1".

Suspended Queue ID: "{B365E040-E11B-47BE-A4AF-7354E6882F91}"

↑ Back to the top

Cause

This is a security issue related to the access rights to the certificates. Only users who create or import the certificates have access to that certificate. By default, the BizTalk Messaging Service is configured to run as the LocalSystem account. This account does not have access to the certificate and therefore cannot encrypt and deliver the message.

↑ Back to the top

Resolution

To work around this issue, run the BizTalk Messaging Service using a Service Account. A Service Account is a normal user account that is used with a server service to allow the service to function as a specific user. The user account should be the same user account used to create and/or import certificates to your BizTalk Server computer.

↑ Back to the top