Possible cause

The SSL certificate was not created with the correct cryptographic service provider and key spec. The KeySpec property sets or retrieves the type of key generated. Valid values are determined by the cryptographic service provider in use, typically Microsoft RSA.

Possible solution

Verify that the Provider, ProviderType, and KeySpec values are the same as the examples below or the CA must reissue a new SSL and appropriate provider and key spec values.

1. On the computer that hostsBEMS, open the Windows PowerShell and type the following command: certutil.exe –v –store “my” <name of ssl cert>” > c:\temp\ssl.txt
2. In a text editor, open the ssl.txt file. By default, the ssl.txt file is located in <drive>:\temp.
3. Search for CERT_KEY_PROV_INFO_PROP_ID.
4. The SSL certificate information should return the following information:

   CERT_KEY_PROV_INFO_PROP_ID(2):
   Key Container = 9ad85141c0b791ad17f0687d00358b70_dd7675d5-867d-479c-90b0-cd24435fe903
   Provider = Microsoft RSA SChannel Cryptographic Provider
   ProviderType = c
   Flags = 20
   KeySpec = 1 -- AT_KEYEXCHANGE