web
You’re offline. This is a read only version of the page.
close
Skip to main content
Community site session details

Community site session details

Session Id :
Microsoft Dynamics AX (Archived)

Unable to Activate HTTP Inbound Port (X.509 error)

(0) ShareShare
ReportReport
Posted on by

Hello,

I am attempting to setup an Inbound port so I can expose a web service to our vendor and allow them to send us some data. Initially I'm just trying to get the web service running on our test server through AIF. 

Here is what I have:

IIS is installed on the test server.

The default web site setup through AX (2012).

Virtual directory share path: C:\Program Files\Microsoft Dynamics AX\60\AifWebServices

URL: https://localhost/MicrosoftDynamicsAXAif60

Validate - successful

Inbound Port:

Name - TestServices

Enhanced - HTTP

URI: https://localhost/MicrosoftDynamicsAXAif60/TestServices/xppservice.svc

When I try to active this port, these files are created:

C:\Program Files\Microsoft Dynamics AX\60\AifWebServices\Bin\microsoft.dynamics.ax.sevices.testservices.dll

C:\Program Files\Microsoft Dynamics AX\60\AifWebServices\TestServices 

web.config (empty - only a 0 in the file)

xppservice.svc

I also receive this error when trying to active the port:

System.OperationCanceledException: AIF service group not activated.  Service group: WBMServices.  Error: Cannot load the X.509 certificate identity specified in the configuration. ---> System.InvalidOperationException: Cannot load the X.509 certificate identity specified in the configuration.

Some of the files are being created in the AifWebServices folder/sub folder, so I don't think it's a permissions issue or I suspect that none of the files would be created. But for some reason the web.config file is not be created correctly. Not sure if the activation is failing because the web.config is empty or if the web.config is empty because the activation failed. 

The X.509 seems to refer to the endpoint, which should be in the web.config.

Any ideas?

Thanks,

Greg

*This post is locked for comments

I have the same question (0)
  • Suggested answer
    Community Member Profile Picture
    on at
    RE: Unable to Activate HTTP Inbound Port (X.509 error)

    Hi,

    I think the recommendation solution in your case would be using "Windows Azure Service Bus" instead of exposing AIF service directly.  

    If for some reasons Azure doesn't fit your project, then I would recommend deploying an inbound port on HTTP web site first and then manually re-configuring it to HTTPS.

  • Suggested answer
    gpa Profile Picture
    on at
    RE: Unable to Activate HTTP Inbound Port (X.509 error)

    Thank you Oleg,

    I will look into Azure as an alternate.

    Greg

  • Community Member Profile Picture
    on at
    RE: Unable to Activate HTTP Inbound Port (X.509 error)

    Add the dns value tag within the identity tag.

    in web.config file

  • gpa Profile Picture
    on at
    RE: Unable to Activate HTTP Inbound Port (X.509 error)

    The web.config is empty - just contains a zero. No tags.

  • Suggested answer
    Community Member Profile Picture
    on at
    RE: Unable to Activate HTTP Inbound Port (X.509 error)

    Hi,

     I'm afraid it is not a case of just one missing tag. I have a feeling that AX does not support HTTPS for WCF running on IIS. It is hardcoded to use Windows authentication for transport.

    One option is to extend AifIISHttpConfigProvider classes and implement SSL support. Another option is to deploy port of HTTP and then manually adjust the resulted web.config.

  • Suggested answer
    Community Member Profile Picture
    on at
    RE: Unable to Activate HTTP Inbound Port (X.509 error)

    Hi,

    I am afraid my previous answers were quite misleading and I am sorry for that. After reading your post carefully I realized that you don't need HTTPS support for AX service itself (which is not possible since it is hardcoded to be net.tcp in AifIISHttp* classes).

    You need only a router service to be configured correctly. Please, recreate your Inbound port and configure it using this instruction: "SSL Certificate for AX Web Services".

    When the port is tested from your local network - you can try re-deploying it with client credential type changed to "certificate" (so that your vendor will be able to connect from external network)

Under review

Thank you for your reply! To ensure a great experience for everyone, your content is awaiting approval by our Community Managers. Please check back later.

Helpful resources

Quick Links

Responsible AI policies

As AI tools become more common, we’re introducing a Responsible AI Use…

Pallavi Phade – Community Spotlight

We are honored to recognize Pallavi Phade as our Community Spotlight honoree for…

Leaderboard > 🔒一 Microsoft Dynamics AX (Archived)

#1
Alexey Lekanov Profile Picture

Alexey Lekanov 3

#2
Michele Gozzi Profile Picture

Michele Gozzi 2

#2
Scott_itD Profile Picture

Scott_itD 2 Community Manager

Last 30 days Overall leaderboard

Featured topics

Product updates

Dynamics 365 release plans