Warning

It is crucial that you select the proper certificates! The certificate that you select for decrypting purposes must be the same as the one you exported to the trading partner that will send your documents over that channel. The certificate to verify the signature of the document must be the certificate that the trading partner exported to you and will use for signing.

To make this last part more clear, let's list the steps you need to take:

1. Open Start | Programs | BizTalk Server 2000 | BizTalk Messaging Manager.

2. Select Channels under Search for other items.

3. Click Search Now.

4. Select the appropriate channel from the list in the right pane.

5. Right-click it, and select Edit.

6. Click Next twice.This brings you to the Channel Properties page named Inbound Document.

7. Check the box Verify decryption certificate on inbound document, click Browse..., and select the certificate that you selected for this function. Note that the dialog Select a Certificate to Verify Decryption explicitly states that it looks in the store "My Store"; hence, Personal Folder.

8. Check the box Verify signature certificate on inbound document, click Browse..., and select the certificate that you selected for this function. Note that the dialog Select a Certificate to Verify Decryption explicitly states that it looks in the BizTalk store.

9. Click Next, which brings you to the Channel Properties page named Outbound Document.

10. Check the box Sign outbound document, click Browse., and select the certificate that you selected for the option Verify decryption certificate on inbound document on the Inbound Document page.

11. Click Finish.

When selecting certificates for the channels, it is advised to create a new certificate for every channel.This allows you to revoke a certificate if a channel becomes obsolete or a trading partner no longer makes use of the BizTalk application. In this way, you always keep control over the way the certificate is used.

Was this article helpful?

0 0

Post a comment