Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Exception: User's internal Message Queuing certificate does not ex

800 views
Skip to first unread message

Suds

unread,
Sep 25, 2008, 2:37:02 PM9/25/08
to
Please help to solve the following excetion, All I am trying to do is to send
authenticated message to a public queue in the same server.

System.Messaging.MessageQueueException was caught
Message="User's internal Message Queuing certificate does not exist."
Source="System.Messaging"
ErrorCode=-2147467259

Above exception occurs when trying to send a message with the following code:

mq.EncryptionRequired = EncryptionRequired.Body;
mq.DefaultPropertiesToSend.Priority = MessagePriority.Highest;
mq.DefaultPropertiesToSend.UseAuthentication = true;

msg.UseEncryption = true;
msg.UseAuthentication = true;

mq.Send(msg);

I have registered certificate in AD (Win2003) and renewed internal
certificate sucessfully to make sure its not corrupted.

On the receiving application before receiving added code:
receivemq.DefaultPropertiesToSend.UseAuthentication = true;

John Breakwell (MSFT)

unread,
Sep 29, 2008, 6:10:27 AM9/29/08
to
Hi Suds

Has the account that is running the application ever interactively logged on
to the machine that is running the application?

This is a common problem if you are using a service account to run the
application.
As the account has never logged in, MSMQ has never created the certificate
for this machine/user combination.

Cheers
John Breakwell (MSFT)

"Suds" <Su...@discussions.microsoft.com> wrote in message
news:DC9AFE9E-5424-4A1D...@microsoft.com...

Suds

unread,
Sep 29, 2008, 12:15:00 PM9/29/08
to
John,

Both the sender and receiver applications are .net windows services running
under default local system user account. Should I use some other account
(administrator or a user with admin previlages) to run the services? Please
advice.

Suds

John Breakwell (MSFT)

unread,
Sep 29, 2008, 9:26:38 PM9/29/08
to
You need to use an account that has been logged in interactively on that
machine (so not local system).
What privileges the account needs is up to your design.

Cheers
John Breakwell (MSFT)

"Suds" <Su...@discussions.microsoft.com> wrote in message

news:67D55C74-DCE5-495C...@microsoft.com...

John Breakwell

unread,
Jan 23, 2009, 5:47:01 AM1/23/09
to
A correction to my advice:

http://blogs.msdn.com/johnbreakwell/archive/2009/01/23/how-to-send-authenticated-msmq-messages-without-using-a-domain-account.aspx

Cheers
John Breakwell (MSFT)

0 new messages