Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

SSL no longer works after you remove an SSL binding from SQL Server 2008 Reporting Services by using the Reporting Services Configuration Management tool


Symptoms

You remove a Secure Socket Layer (SSL) binding for Microsoft SQL Server 2008 Reporting Services by using the Reporting Services Configuration Management tool. After you do this, SSL no longer works for Web sites on a server that is running Internet Information Services (IIS) or on another HTTP.SYS server.

↑ Back to the top


Cause

This problem occurs because the Reporting Services Configuration Management tool removes the following registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HTTP\Parameters\SslBindingInfo\0.0.0.0:443
The following values for this registry key are removed:
  • SslCertHash
  • AppId
  • DefaultSslCertCheckMode
  • DefaultSslRevocationFreshnessTime
  • DefaultSslRevocationUrlRetrievalTimeout
  • DefaultFlags
  • SslCertStoreName
  • DefaultSslCtlIdentifier
  • DefaultSslCtlStoreName
When this registry key is removed, the SSL binding for IIS is also removed. Without this binding, SSL is not provided for the HTTPS protocol.

↑ Back to the top


Workaround

To work around this issue, restore the SSL binding to IIS. To do this, follow these steps:

  1. Open IIS Manager. To do this, follow these steps:
    1. Click Start, and then click All Programs.
    2. Click Administrative Tools, and then click Internet Information Services (IIS) Manager.
  2. In the Connections pane, expand the Sites node in the tree, and then click the site for which you want to add a binding.
  3. In the Actions pane, click Bindings.
  4. In the Site Bindings dialog box, click Add.
  5. In the Add Site Binding dialog box, enter the binding information, and then click OK.

↑ Back to the top


Status

Microsoft has confirmed that this is a bug in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


More Information

To prevent this problem in the future, use one of the following procedures.

How to manage HTTP.SYS by using IIS

Remove the SSL binding for Reporting Services by using IIS Manager, and then restore the SSL binding. To do this, follow these steps:
  1. Open IIS Manager. To do this, follow these steps:
    1. Click Start, and then click All Programs.
    2. Click Administrative Tools, and then click Internet Information Services (IIS) Manager.
  2. In the Connections pane, expand the Sites node in the tree, and then click the site for which you want to remove the Reporting Services SSL binding.
  3. In the Actions pane, click Bindings.
  4. In the Site Bindings dialog box, click Remove.
After you have removed the SSL binding from the Web site, follow the steps in the "Workaround" section to restore the SSL binding to the Web site. This procedure does not restore the SSL binding to Reporting Services. Instead, this procedure restores the SSL binding to the rest of the Web site.

How to manage HTTP.SYS without using IIS

If you manage the HTTP.SYS configuration through a system or process other than IIS, you should use a different tool to remove and to re-create the binding. If you are running Windows XP, Windows Vista, or Windows Server 2008, you can use the Httpcfg tool.

For more information about the Httpcfg tool, visit the following Microsoft TechNet Web site:

Additionally, in Windows Vista and in Windows Server 2008, you can use the netsh command to manage the SSL binding.

For more information about how to use the netsh command, visit the following Microsoft TechNet Web site:

↑ Back to the top


Keywords: sql2008relnotereportingservices, sql2008relnote, kbssl, kbexpertiseinter, kbtshoot, kbprb, kb, misc_migrate_32718

↑ Back to the top

Article Info
Article ID : 956209
Revision : 3
Created on : 4/13/2018
Published on : 4/13/2018
Exists online : False
Views : 663