Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Details
| Field | Error Details |
|---|---|
| Product Name | BizTalk Server |
| Product Version | 3.9 |
| Event ID | - |
| Event Source | BizTalk Server EDI |
| Component | AS2 Engine |
| Symbolic Name | - |
| Message Text | An error occurred when validating an AS2 message. Make sure the certificates used have not timed out or been revoked. |
Explanation
This Error/Warning/Information event indicates that the AS2 receive pipeline or the AS2 send pipeline could not validate the AS2 message. This can occur if the certificate used in the signature verification process is not valid, is not stored in the appropriate location, or does not match the certificate used in the signing process.
User Action
To resolve this error, do one or more of the following:
Verify that the signature wrapper in the AS2 message is valid. If not, determine why the message was signed improperly by the encoder.
Verify that the private key used in the signing process and the public key used in the signature verification process match.
Verify that the Key Usage property of the certificate used for signing and signature verification is set to "data encipherment".
Verify that there is not a broken chain of intermediate certificate authorities. If there is, delete the old certificate, and create and use a new certificate.
Verify that the certificate has not timed out by checking its expiration date in the Certificates store (using MMC with a certificates snap-in.).
Verify that the certificate has not been revoked by checking the Certification Revocation List. (You can have BizTalk Server check this automatically by checking the Check Certification Revocation List property in the General AS2 properties in the BizTalk Server Administration Console.)
Verify that the certificate used for signature verification is stored in the Local computer/Other People store of each BizTalk server that hosts a MIME/SMIME decoder pipeline as each host instance service account.