Configure SSRS for SSL

Question

I have a SSRS instance, running SSRS 2014, and I want configure it for usage over SSL.

The server is available at http://reports.mydomain2.com

I purchased a multi SSL certificate from GoDaddy, on domain www.mydomain.com, and I added reports.mydomain2.com as SAN

I generated the SSL certificate from GoDaddy as for IIS, imported the certificate into Intermediate Certification Authority and in Personal/Certificates

The I started the SSRS config manager, and I'm trying to setup the SSL I see the certificate, but when I select it and click Apply I get error that SSL certificate cannot be bound

The error shown is

Microsoft.ReportingServices.WmiProvider.WMIProviderException: An unknown error has occurred in the WMI Provider. Error Code 80070520

 ---> System.Runtime.InteropServices.COMException (0x80070520): A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520)
   --- End of inner exception stack trace ---
   at Microsoft.ReportingServices.WmiProvider.RSWmiAdmin.ThrowOnError(ManagementBaseObject mo)
   at Microsoft.ReportingServices.WmiProvider.RSWmiAdmin.CreateSSLCertificateBinding(String application, String certificateHash, String ipAddress, Int32 port)
   at ReportServicesConfigUI.WMIProvider.RSReportServerAdmin.CreateSSLCertificateBinding(UrlApplication app, String certificateHash, String ipAddress, Int32 port)

I checked the bindings with command

netsh http show urlacl

and I found an entry on port 443

Reserved URL            : https://+:443/sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/
    User: NT SERVICE\SstpSvc
        Listen: Yes
        Delegate: Yes
    User: BUILTIN\Administrators
        Listen: No
        Delegate: No
    User: NT AUTHORITY\SYSTEM
        Listen: Yes
        Delegate: Yes
        SDDL: D:(A;;GA;;;S-1-5-80-3435701886-799518250-3791383489-3228296122-2938884314)(A;;GR;;;BA)(A;;GA;;;SY) 

I don't know if this makes any difference or not (if the port 443 is already bound, preventing it from binding to SSRS url or not

But another possible problem is might be the fact that SSRS Config manager doesn't allow me to change the url for SSL binding to reports.mydomain2.com. but instead it tried to bind to default domain of the certificate.

Any idea what could be wrong, and how can I solve it?

Answer 1

Error : An SSL binding already exists for the specified IP address and port combination.

Ever encountered above error ? A simple fix is below.

• we need to remove the existing binding and in order to achieve that we need to know which certificate is actually binding it;

• use the following command in cmd (Command Prompt): netsh http show sslcert;

• remove the binding by using the following command: netsh http delete sslcert ipport=0.0.0.0:443;

Once you are done, bind the URL again with the SSL certificate and this time it will go through. Test the URL and it should be working fine.