Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am writing a client application that needs to send a file via BITS to my server. I have everything working for the most part, but I can't get the BITS connection to operate securely with HTTPS.

Right now I'm just using basic authentication through HTTP, so the login is being sent cleartext--which is not optimal :-) I would like to be able to use HTTPS, but am not sure how to go about doing this. According to this Google Groups thread, BITS "doesn't support authentication using certificates" (though that comment is a few years old now). Does this mean SSL is out? How else can I secure a connection for BITS via HTTPS?

My server is running IIS 6.0 on Windows Server 2003. Any help would be greatly appreciated!

(I originally posted this at Stack Overflow, but thought I would try here as well--seems to fall under both domains)

share|improve this question


Using Certificates for Client/Server Authentication

In secure client/server communication, clients and servers can use digital certificates to mutually authenticate each other. BITS automatically supports certificate-based server authentication for secure HTTP transports. To provide BITS the client certificate needed for mutual authentication, call either the





When a web site accepts but does not require an SSL client certificate, and the BITS job does not specify a client certificate, the job will fail with ERROR_WINHTTP_CLIENT_AUTH_CERT_NEEDED (0x80072f0c).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.