Create Certificate Binding Issue on SQL Server Reporting Services

Question

Create Certificate Binding Issue on SQL Server Reporting Services

Sushant Yadav 40

Hi Everyone,

I am trying to add https identity on SSRS, but failing with certificate binding error.

While configuration, I can see events where URL registration is successful but due to Certificate binding issue it is getting reverted.

As checked, there is now URL reservation exists on 443 port.

Error:

configmanager!DefaultDomain!2d30!12/09/2023-18:02:04:: i INFO: Using report server internal url http://localhost:80/ReportServer.

configmanager!DefaultDomain!2d30!12/09/2023-18:02:04:: i INFO: Using report server external url http://ServerName:80/ReportServer.

configmanager!DefaultDomain!2d30!12/09/2023-18:02:04:: i INFO: Using url root http://ServerName:80/ReportServer.

servicecontroller!DefaultDomain!2d30!12/09/2023-18:02:04:: i INFO: Config file changed; stopping the RPC server

rpcserver!DefaultDomain!2d30!12/09/2023-18:02:04:: i INFO: RPC Server stopped.

servicecontroller!DefaultDomain!2d30!12/09/2023-18:02:04:: i INFO: ServiceAppDomainController - RPC Server stopped.

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: The Config file changed; resetting the config file change tracking data member and recycling all AppDomains

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Recycling ASP.NET AppDomains without memory recycling, i.e. create the new ones before the current ones fully unload.

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: SPN for the service account is http/ServerName.nza.local

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: SPN for the service account is http/ServerName

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: The UserAccountControl value for the service account is 528384

rshost!rshost!15e8!12/09/2023-18:02:04:: i INFO: Registered url=https://ServerName:443/ReportServer/, vdir=/ReportServer, pdir=C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\ReportServer.

rshost!rshost!15e8!12/09/2023-18:02:04:: i INFO: Currently registered url https://ServerName:443/ReportServer/ on endpoint 2

rshost!rshost!15e8!12/09/2023-18:02:04:: i INFO: Currently registered url https://ServerName:808/ReportServer/ on endpoint 2

rshost!rshost!15e8!12/09/2023-18:02:04:: i INFO: Currently registered url http://+:80/ReportServer/ on endpoint 2

rshost!rshost!3d80!12/09/2023-18:02:04:: i INFO: Derived memory configuration based on physical memory as 67108864 KB

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Recycling the WindowsService AppDomain from the default domain. Max allowed unload time = 1800 sec

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: InternalStop: stop the service code running in the worker domain

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: InternalStop: found a worker domain

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: WorkerDomainProxy: replacing the current proxy reference with 'null'

dbpolling!WindowsService_0!2f00!12/09/2023-18:02:04:: i INFO: EventPolling polling service stopped

dbpolling!WindowsService_0!2f00!12/09/2023-18:02:04:: i INFO: NotificationPolling polling service stopped

dbpolling!WindowsService_0!2f00!12/09/2023-18:02:04:: i INFO: SchedulePolling polling service stopped

dbpolling!WindowsService_0!2f00!12/09/2023-18:02:04:: i INFO: UpgradePolling polling service stopped

rshost!rshost!3d80!12/09/2023-18:02:04:: i INFO: Application domain type WindowsService statistics: created: 1, unloaded: 1, failed: 0, timed out: 0.

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Registering AppDomain: type='WindowsService'; id='3'; Name='WindowsService_1'

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Registering AppDomain: overriding the registration of the following AppDomain - type='WindowsService'; id='2'; Name='WindowsService_0'

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Creating a new AppDomainLifeCycleManagementEntry for AppDomain id '3'

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Appdomain STARTED: id='3'; name='WindowsService_1'

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:04:: i INFO: Creating an instance of class 'ReportingServicesLibrary, Version=14.0.0.0, Culture=neutral, PublicKeyToken=89845dcd8080cc91' from assembly 'Microsoft.ReportingServices.Library.ServiceAppDomain' in domain 'WindowsService_1'

library!WindowsService_1!3d80!12/09/2023-18:02:06:: i INFO: SQLDump flags: ReferencedMemory, AllThreads, SendToWatson

library!WindowsService_1!3d80!12/09/2023-18:02:06:: i INFO: MiniDump flags: DataSegs, UnloadedModules, ProcessThreadData

library!WindowsService_1!3d80!12/09/2023-18:02:06:: i INFO: Dump on: Microsoft.ReportingServices.Diagnostics.Utilities.InternalCatalogExceptionMicrosoft.ReportingServices.Modeling.InternalModelingExceptionMicrosoft.ReportingServices.ReportProcessing.UnhandledReportRenderingException

library!WindowsService_1!3d80!12/09/2023-18:02:06:: i INFO: Do not dump on: Microsoft.PowerBI.ReportServer.WebApi.Catalog.CatalogAccessExceptionSystem.Threading.ThreadAbortExceptionSystem.Web.UI.ViewStateExceptionSystem.OutOfMemoryExceptionSystem.Web.HttpExceptionSystem.IO.IOExceptionSystem.IO.FileLoadExceptionMicrosoft.SharePoint.SPExceptionMicrosoft.ReportingServices.WmiProvider.WMIProviderExceptionSystem.AppDomainUnloadedException

library!WindowsService_1!3d80!12/09/2023-18:02:06:: i INFO: Minidump location: C:\Program Files\Microsoft SQL Server Reporting Services\SSRS\Logfiles

resourceutilities!WindowsService_1!3d80!12/09/2023-18:02:06:: i INFO: SKU: SQL Server Standard

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: Clearing dead AppDomain 2 ('WindowsService_0')

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: Clearing dead AppDomain 2: the AppDomain is not processing

servicecontroller!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: Clearing dead AppDomain 2: the AppDomain is not processing or its allotted unload time elapsed; forcing an unload...

servicecontroller!WindowsService_0!3d80!12/09/2023-18:02:06:: i INFO: Service controller exiting.

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: UnloadAppDomain: 2, 'WindowsService_0'

library!WindowsService_1!2f28!12/09/2023-18:02:06:: i INFO: Catalog SQL Server Edition = Standard

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: Unregistering AppDomain id='2'

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: Unregistering AppDomain: searching for AppDomain id '2'

appdomainmanager!DefaultDomain!3d80!12/09/2023-18:02:06:: i INFO: Appdomain:2 was not registered. Its registration was probably already replaced with a new AppDomain (since this one is getting recycled).

library!DefaultDomain!15e8!12/09/2023-18:02:06:: e ERROR: Throwing Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException: Invalid PBI Configuration, Microsoft.ReportingServices.Diagnostics.Utilities.ServerConfigurationErrorException: The report server has encountered a configuration error. ;

1 answer

Your answer

Answer 1

Anonymous

Hi @Sushant Yadav

If the certificate is installed correctly in the local computer store, the Reporting Services Configuration tool will detect it and display it in the SSL Certificates list on the Web Service URL and Web Portal URL pages.

If you configure a binding with a TLS/SSL certificate in Reporting Services and you later want to remove the certificate from the computer, make sure to remove the binding from Reporting Services before you remove the certificate from the computer.

For more details, you can refer to this document: Bind TLS to a reporting services URL reservation.

Best regards,

Aniya

Sushant Yadav 40 Reputation points

2023-12-12T12:25:03.47+00:00

Hi Aniya,

Thanks for your reply.

The certificate is installed correctly in the local computer store, the SSRS configuration manager is able to list the certificate as well.

While adding the HTTPS identity URL is getting reserved, but it is getting failed on Certificate binding. Due to which URL reservation is getting reverted.

As checked, there are no URL's are mapped on 443 ports for ReportServer.

Additional Error Details:

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!AddUrlReservation: UrlString=http://+:80

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!AddUrlReservation: UrlString=https://ServerName:443

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!AddUrlReservation: UrlString=http://+:80

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!GetSSLCertificateBindings: Entering method

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!GetSSLCertificateBindings: There are no SSL certificate bindings

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!GetSSLCertificateBindings: Leaving method, hr = 0x1

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!FindCertificate: Leaving with hr = 0x0

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!E!BindToSSLCertificate: Couldn't remove the binding from httpsys, hr = 0x80070032

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!BindToSSLCertificate: Leaving method, hr = 0x80070032

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!E!CreateSSLCertificateBinding: Couldn't bind httpsys to SSL certificate, hr = 0x80070032

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!W!CreateSSLCertificateBinding() with hr = 0x80070032

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!E!RemoveSSLCertificateBinding: Certificate was not bound, hr = 0x8004023a

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!RemoveSSLCertificateBinding: Leaving method hr = 0x0

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!E!ReserverURL(): RemoveSSLCertificateBinding returned hr = 0x0

ReportingServicesWMI!7780!8292!2023/11/25-00:18:10!UserName!I!CMSRSCfg_ConfigurationSetting: GetObject() for Instance SSRS: IsAdmin = 1 with hr = 0x0

Share via

Create Certificate Binding Issue on SQL Server Reporting Services

1 answer

Your answer