SSL not working after Generalizing Azure Windows VM

0

I configured SSL on my original Windows 2016 server test website to work with HTTPS traffic.

After generalizing the VM, when I created a new Windows VM from the generalized VHD, I'm unable to browse through HTTPS traffic.

When I tried to edit the Binding for HTTPS, I got the following error:

A specified logon session does not exist.It may have already been terminated.Exception from HRESULT: 0x80070520

What steps do I have to follow before generalizing the Windows VM so that the above error doesn't occur.

As I would using that VHD for Autoscaling, I can't RDP and resolve this issue on every VM launched under Autoscaling.

Please help me.

azure
ssl
iis
load-balancing
autoscaling
asked on Stack Overflow Nov 23, 2017 by kevin peter • edited Nov 23, 2017 by kevin peter

2 Answers

3

Error HRESULT: 0x80070520

  1. Check the "Allow this certificate to be exported" checkbox when import the pfx with IIS UI
  2. Issue the CA to FQDN name
  3. Import the CA with mmc instead of IIS UI

Check: certutil -v -store my cert_hash_of_non_working_cert (e.g. certutil -v -store my aac000ba4d663753ecbc80c082fd1feb2e2b4a11)

and check for Key containers / Unique container name IDs. If you can find files in C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys with name equivalent to key container id check for the ACLs.

Additional information: Refer here

answered on Stack Overflow Nov 23, 2017 by SumanthMarigowda-MSFT • edited Nov 23, 2017 by SumanthMarigowda-MSFT
0

I resolved my SSL issue on my Windows VHD for Azure Autoscaling by using running scheduled task on startup on the below given powershell script to install the SSL.

restore-certificates.ps1

write-applicationeventlog.ps1

Just follow the steps given inside restore-certificates.ps1 file and create a Scheduled task using System user and select Run whether user is logged in or not in the General options.

answered on Stack Overflow Nov 28, 2017 by kevin peter

User contributions licensed under CC BY-SA 3.0