Install the certificate into the Personal Store
There are three ways that a certificate can be installed into the BizTalk HOST account’s Personal store. Use one of the following options:
Option 1
Log in to the BizTalk server as the BizTalk service account. Then, open the MMC, add the
Certificates snap-in and import the certificate into the
Certificate – Current User Personal store. This is probably the best option if you will be configuring a certificate for Signing, Encryption or Decryption in BizTalk Administration.
Note The
MMC Certificates Snap-In Import Steps section below provides more specific steps.
Option 2
Open the MMC as the BizTalk service account using the RunAs feature. Steps:
1. Open a command window.
2. Type: runas /user:
BizTalkServiceAccount mmc
3. Hit Enter.
4. Enter the password when prompted.
Once in the MMC, add the
Certificates snap-in and import the certificate into the
Certificates – Current User Personal store. The
MMC Certificates Snap-In Import Steps section below provides more specific steps.
Option 3
The Certificate Wizard SDK Utility can be used to import the certificate into the BizTalk host account’s Personal store and configure the certificate in the BizTalk Group properties correctly.
For more information on Certificate Wizard SDK Utility, visit the following MSDN site:
http://msdn.microsoft.com/en-us/library/bb727929.aspxConfigure the certificate in BizTalk Administration
There are four places to configure certificates in BizTalk Administration:
· BizTalk Group properties
· Party properties
· Send Port properties
· Host properties
The appropriate certificate must be added to the appropriate certificate store and associated with the appropriate BizTalk artifact. The MSDN link below should be used to determine the following:
· Which store the certificate should be imported
· If a private certificate (.pfx) or a public certificate (.cer) is needed
· Where in BizTalk Administration a certificate should be configured
Configuring Certificates for AS2
http://msdn.microsoft.com/en-us/library/bb728096.aspxLoad the BizTalk user profile
The Personal certificate store will be available for message processing only if the BizTalk host account’s user profile is loaded. For the in-process host instance, the user profile is loaded by default. For the isolated host instance, the user profile is not loaded by default.
There are two options to work-around this behavior:
1. Use the same account for the in-process host instance and the isolated host instance.
2. Create an application to load the user profile for the isolated host.
For information on the LoadUserProfile Function, visit the following MSDN site:
http://msdn.microsoft.com/en-us/library/bb762281(VS.85).aspxRename the BizTalk group back to the default
To work around this behavior, rename the BizTalk group back to the default value of
BizTalk Group. To do this, follow these steps:
1. Open BizTalk Administration.
2. Select the BizTalk group.
3. Right-click the BizTalk group and select
Properties.
4. In
General, change the
Name property to
BizTalk Group.
5. Cick
OK.