As only one certificate (i.e. from certificate personal store/private key) can be configured for BizTalk host, & it requires 2 different certificates to both verify digital signature and decrypt message, how to perform both verification & decryption ?

SaTechyv 6

Hi all,

As only one certificate (i.e. from certificate personal store/private key) can be configured for BizTalk host, & it requires 2 different certificates to both verify digital signature and decrypt message, how to perform both digital signature verification & decryption for the incoming message?

The digital signature verification requires the client's certificate (public key) and decryption requires personal certificate (i.e. private key). So 2 different certificate is required and BizTalk Host can only be configured to certificate from personal store (i.e. private key). So where can the client's certificate (i.e. public key) be configured for digital signature verification.

PLEASE HELP

Tks in advance

SaTechvy

Colin Dijkgraaf 1,346 Reputation points

2023-08-13T10:00:33.8366667+00:00

What adapter are you using?

If you are doing AS2 stuff, it is in Parties.
SaTechyv 6 Reputation points

2023-08-17T16:31:15.31+00:00

Hi,

I am not using AS2 or parties. Let us say we are using FILE adapter.

tks

SaTechvy
Colin Dijkgraaf 1,346 Reputation points

2023-08-17T20:27:09.2033333+00:00

The File adapter doesn't use certs. Is it a specific pipeline component you are using?
SaTechyv 6 Reputation points

2023-08-18T06:29:04.2633333+00:00
file adapter is just a "scenario". I would be using MIME/SMIME component. the question here is how and where to specify two different certificates for decryption and verifying signature.

I have set certificate at host for decryption.

I am receiving message that is both signed and encrypted.

So how does "verifying signature" happens ? where does BizTalk get the certificate ("public key") to verify signature ?

tks

SaTechvy

Share via

As only one certificate (i.e. from certificate personal store/private key) can be configured for BizTalk host, & it requires 2 different certificates to both verify digital signature and decrypt message, how to perform both verification & decryption ?