During MSSQL secure connection facing error: 0x8009030d. Check certificates to make sure they are valid
<p>I'm trying to create a secure connection for my SQL server using certificate. I have generated CA certificate and used it to sign the subordinate certificate using XCA tool.</p>
<p>Installed the certificate in Local computer &quot;Personal&quot; store and CA in &quot;Trusted Root Authorities&quot; store. Also added the SQL server user in the &quot;Manage Private Keys -&gt; Security&quot; option and given permission to SQL user for the &quot;MSSQL&quot; installation folder.</p>
<p>I could able to see the certificate in &quot;SQl Server Configuration Manager -&gt; SQL Server Network Configuration&quot; and added the certificate. Set &quot;Force Encryption&quot; option as YES.</p>
<p>Now when i restart the SQL server, getting the following error:</p>
<blockquote>
<p>The server could not load the certificate it needs to initiate an SSL
connection. It returned the following error: 0x8009030d. Check
certificates to make sure they are valid.</p>
<p>Starting up database 'model'.</p>
<p>Server name is 'VCE-W0031'. This is an informational message only. No
user action is required.</p>
<p>Error: 26014, Severity: 16, State: 1. Unable to load user-specified
certificate [Cert Hash(sha1) &quot;xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx&quot;].
The server will not accept a connection. You should verify that the
certificate is correctly installed. See &quot;Configuring Certificate for
Use by SSL&quot; in Books Online.</p>
<p>Error: 17182, Severity: 16, State: 1.</p>
<p>TDSSNIClient initialization failed with error 0x80092004, status code
0x80. Reason: Unable to initialize SSL support. Cannot find object or
property.</p>
<p>Error: 17182, Severity: 16, State: 1.</p>
<p>TDSSNIClient initialization
failed with error 0x80092004, status code 0x1. Reason: Initialization
failed with an infrastructure error. Check for previous errors. Cannot
find object or property.</p>
<p>Error: 17826, Severity: 18, State: 3.</p>
<p>Could not start the network
library because of an internal error in the network library. To
determine the cause, review the errors immediately preceding this one
in the error log.</p>
</blockquote>
<p>I have created another CA and certificate using Openssl tool and insalled in Trusted Authorities and Personal stores respectively. Added this certificate in
&quot;SQl Server Configuration Manager -&gt; SQL Server Network Configuration&quot; and added the certificate. Set &quot;Force Encryption&quot; option as YES.</p>
<p>Without any further setting, i could able to run the SQL server and the encrypted connection is established when client is connected.</p>
<p>Please let me know why this error could happen in case of certificate generated using XCA, but not Openssl.</p>
<p>The question what i wanted to ask is, using a certificate which is signed by an existing certification authority instead of creating a CA with openssl could cause any issue?</p>