netsh error - 1312

[=?Utf-8?B?U2NvdHQ=?=]

I have seen numerous posts, both here and google, where people are having
this issue, but I have yet to see an explanation of the problem.

I have a WCF service that is working fine using http. But now we need to
upgrade it to use SSL. To do this we need to install and register a server
certificate.

I got a certificate (Web Server) from our enterprise cert server. Exported
it as a cer file and installed it on my development machine (Vista 64
ultimate, vs2008).

running netsh

netsh>http add sslcert ipport=0.0.0.0:5433
certhash=b6306171c7f42d54b59fd8c47d07d260b336e199 clientc
ertnegotiation=enable appid={e0456eb3-e143-4092-9f84-7527136625cd}

SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been terminated.

where certhash is the thumbprint from the certificate and the appid is the
guid from the assemblyinfo.cs file on the server project.

What does 1312 indicate?
--
Scott Norberg

[Steven Cheng]

Hi Scott,

From your description, you're trying to use HTTPS/SSL for a self hosted WCF
service. However, you're encountering the following error when registring
the SSL certifictae for the https port, correct?

===============
SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been
terminated.
=============

I've just performed a local test, including test cert creating, ssl port
registering and WCF service host and running. For certificate creation and
ssl port registring, I followed this thread:

http://social.msdn.microsoft.com/for...cfc-5b11-4900-
b9bb-e7f4fac940c4/

There are two things you may have a further check:

1. When run the netsh command to register sslcert, have you used elevated
token(to start the commandline prompt)? This is necessary, otherwise ,the
normal permission is not sufficient.

2. My test use a test cert generated via "makecert.exe" (as mentioned in
the above thread). You can also try using a makecert generated cert to see
whether it works. If so, that means the problem is specific to certificate.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.

Note: MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 2 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions. Issues of this
nature are best handled working with a dedicated Microsoft Support Engineer
by contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subs.../aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
From: =?Utf-8?B?U2NvdHQ=?= <sn******@newsgroups.nospam>
Subject: netsh error - 1312
Date: Wed, 19 Nov 2008 15:19:00 -0800
I have seen numerous posts, both here and google, where people are having
this issue, but I have yet to see an explanation of the problem.

I have a WCF service that is working fine using http. But now we need to
upgrade it to use SSL. To do this we need to install and register a server
certificate.

I got a certificate (Web Server) from our enterprise cert server. Exported
it as a cer file and installed it on my development machine (Vista 64
ultimate, vs2008).

running netsh

netsh>http add sslcert ipport=0.0.0.0:5433
certhash=b6306171c7f42d54b59fd8c47d07d260b336e199 clientc
ertnegotiation=enable appid={e0456eb3-e143-4092-9f84-7527136625cd}

SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been
terminated.

where certhash is the thumbprint from the certificate and the appid is the
guid from the assemblyinfo.cs file on the server project.

What does 1312 indicate?
--
Scott Norberg

[=?Utf-8?B?U2NvdHQ=?=]

Steven,

I had previously read that thread and ignored it because the options given
in the example did not match what was given from the makecert /? response.
The example uses both -sky and -r which are not shown.

I am using elevated privilege in my command box.

Running the example from the article I was able to create the certificate
and run the netsh command.

I still would like to know what the 1312 really indicates, And I still need
to know how to create a certificate from my enterprise certsvr for this
purpose.

I have found that these things always seem to work when you use makecert but
I can then never recreate a certificate from the cert server that does the
same thing. There must be an article (not a book) that tells how to do that,
any suggestions?
--
Scott Norberg
""Steven Cheng"" wrote:

Hi Scott,

From your description, you're trying to use HTTPS/SSL for a self hosted WCF
service. However, you're encountering the following error when registring
the SSL certifictae for the https port, correct?

===============
SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been
terminated.
=============

I've just performed a local test, including test cert creating, ssl port
registering and WCF service host and running. For certificate creation and
ssl port registring, I followed this thread:

http://social.msdn.microsoft.com/for...cfc-5b11-4900-
b9bb-e7f4fac940c4/

There are two things you may have a further check:

1. When run the netsh command to register sslcert, have you used elevated
token(to start the commandline prompt)? This is necessary, otherwise ,the
normal permission is not sufficient.

2. My test use a test cert generated via "makecert.exe" (as mentioned in
the above thread). You can also try using a makecert generated cert to see
whether it works. If so, that means the problem is specific to certificate.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead
Delighting our customers is our #1 priority. We welcome your comments and
suggestions about how we can improve the support we provide to you. Please
feel free to let my manager know what you think of the level of service
provided. You can send feedback directly to my manager at:
ms****@microsoft.com.

==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/en-us/subs...#notifications.

Note: MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 2 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions. Issues of this
nature are best handled working with a dedicated Microsoft Support Engineer
by contacting Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/en-us/subs.../aa948874.aspx
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
From: =?Utf-8?B?U2NvdHQ=?= <sn******@newsgroups.nospam>
Subject: netsh error - 1312
Date: Wed, 19 Nov 2008 15:19:00 -0800
I have seen numerous posts, both here and google, where people are having
this issue, but I have yet to see an explanation of the problem.

I have a WCF service that is working fine using http. But now we need to
upgrade it to use SSL. To do this we need to install and register a server
certificate.

I got a certificate (Web Server) from our enterprise cert server. Exported
it as a cer file and installed it on my development machine (Vista 64
ultimate, vs2008).

running netsh

netsh>http add sslcert ipport=0.0.0.0:5433
certhash=b6306171c7f42d54b59fd8c47d07d260b336e199 clientc
ertnegotiation=enable appid={e0456eb3-e143-4092-9f84-7527136625cd}

SSL Certificate add failed, Error: 1312
A specified logon session does not exist. It may already have been
terminated.

where certhash is the thumbprint from the certificate and the appid is the
guid from the assemblyinfo.cs file on the server project.

What does 1312 indicate?
--
Scott Norberg