FTPS certificate hash BT2010

Question

Hey Folks,
I have been trying to get FTPS Adapter to work in BT 2010 for two days and can't seem to crack it. 
I keep getting the Windows Event Log Error 'The adapter "FTP" raised an error message. Details "Unable to connect to FTP server "xxx.xxx.xxx.xxx" as user "xxxx". Inner Exception details: "The specified client certificate hash is invalid. Provide a valid
client certificate hash. ". ".'
I have logged into the machine as the same account as the host instance is running as, added the certificate to the personal store and the trusted route store, taken the hash from the certificate and populated it in the SSL Section of the Adapter as depicted
on Mikael's blog post on it http://blogical.se/blogs/mikael/archive/2010/09/26/how-to-use-the-new-ftps-adapter-with-biztalk-2010.aspx 
I can connect with an FTP client from the same box and have been able to replicate this on two separate machines (one inside the firewall) and another on a 3G network.
I have followed Thiago's Hotrod post on this and also granted the RecieveHost user account Manage Private Keys on the cert.
The FTP log files don't show anything, just some inital communication between BizTalk and the FTP Server but no certificate errors etc...
Can anyone shed any light on what I'm missing?
Cheers

Answer 1

Hi,
Dan has a good point about storing the key and account. Host for FTP adapter runs in a certain host instance. The account for that host instance needs to have access to the certificate. You there need to log in to your machine and place the certificate
in the appropriate certificate store. The resources below can help you out.
For a checklist of steps to install the certificates see:
Checklist: Installing and Configuring Certificates:
http://msdn.microsoft.com/en-us/library/gg634541%28v=BTS.70%29.aspx
Beside the checklist you can review these resources on MSDN:
Best Practices for Managing Certificates :http://msdn.microsoft.com/en-us/library/gg634535%28v=BTS.70%29.aspx
Known Issues with Certificates in BizTalk Server :http://msdn.microsoft.com/en-us/library/gg634590%28v=BTS.70%29.aspx
Installing and Configuring Digital Certificates :http://msdn.microsoft.com/en-us/library/gg634475%28v=BTS.70%29.aspx
BizTalk Server uses two types of certificate stores, the Other People certificate store for public keys, and the Personal certificate store for each host instance service account for the private key:
Certificate Stores that BizTalk Server Uses :http://msdn.microsoft.com/en-us/library/aa559322%28v=BTS.70%29.aspx
Display Certificate Stores :
http://technet.microsoft.com/en-us/library/cc725751.aspx
HTH
Steef-Jan Wiggers
Ordina ICT B.V. | MVP & MCTS BizTalk Server 2010
http://soa-thoughts.blogspot.com/ |@SteefJan
If this answers your question please mark it accordingly
BizTalk