Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

We are upgrading our webservers from Windows 2003 to Windows Server 2008 R2. Our old methodology of running the following command to use the windows resource toolkit to install our PayPal certificate no longer works:

"d:\program files\windows resource kits\tools\WinHttpCertCfg" -i paypal_cert.p12 -p somepassword -c LOCAL_MACHINE\my -a "NETWORK SERVICE"

How does one go about doing this for Windows Server 2008 R2? Do we need to provide a different account than "NETWORK SERVICE" access to it?

share|improve this question

3 Answers 3

Here you go: http://technet.microsoft.com/en-us/library/cc732785%28WS.10%29.aspx.

share|improve this answer
This worked for us on our Server 2008 box but it did not work for us on our Server 2008 R2 box. Instead we received the following error: The underlying connection was closed: An unexpected error occurred on a send. - Please try again.paypal_api1 –  Blegger Oct 5 '09 at 14:50
You asked how to install a certificate, not how to make the PayPal API work... maybe you should rephrase the question. –  Massimo Oct 5 '09 at 19:01
up vote 0 down vote accepted

The issue appeared to be associated with giving the "NETWORK SERVICE" user access to it. Once we assigned the Application Pool user access to it, it worked. The command was as follows:

D:\Program Files\Windows Resource Kits\Tools>winhttpcertcfg.exe -i ......\PayPal\paypal_cert.p12 -c local_machine\My -a "DefaultAppPool" -p somepassword

share|improve this answer

Check out my step-by-step guide for installing Windows 2008 R2 certificate authority server http://eyalestrin.blogspot.com/2010/07/windows-2008-r2-certification-authority.html

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.