The IISSync command does not run successfully when you use SSL and server certificates in an IIS 5.0 cluster

When you use the IISSync command to synchronize two nodes (for example, node A and node B) in an Internet Information Services (IIS) 5.0 cluster, you receive one of the following error messages:This problem occurs if the following conditions are true:

• You have installed a Web server certificate on node A.
• You use Secure Sockets Layer (SSL) on node A.

This issue may occur if the certificate that you use does not have an exportable private key. The IISSync command cannot replicate the private key if the private key is not exportable. Therefore, the IISSync command is not successful.

To work around this issue, make sure that the certificate that you are using has an exportable private key. If the certificate that you are using does not have an exportable private key, try to use a certificate that has an exportable private key.

If you still experience the issue after you use a certificate that has an exportable private key, follow these steps:

1. On node A, disable SSL in IIS 5.0.
   For more information about how to disable SSL in IIS, click the following article number to view the article in the Microsoft Knowledge Base:
   187498  (http://support.microsoft.com/kb/187498/ ) How to disable PCT 1.0, SSL 2.0, SSL 3.0, or TLS 1.0 in Internet Information Services
2. On node A, open a command prompt.
3. At the command prompt, type IISSync node B, and then press ENTER to synchronize Web sites on both nodes.
4. Close the command prompt.
5. Install a root certification authority certificate on both node A and node B.
6. Export the certificate that you want to use from node A to node B. For more information about how to export a certificate, click the following article number to view the article in the Microsoft Knowledge Base:
   232136  (http://support.microsoft.com/kb/232136/ ) How to back up a server certificate in Internet Information Services 5.0
   Note Make sure that the certificate that you export has a private key that is exportable.
7. On node B, import the certificate that you exported from node A.
8. In Internet Services Manager, bind the certificate that you imported to the Web site that you want to enable SSL for. For more information about how to import and bind a certificate to a Web site, click the following article number to view the article in the Microsoft Knowledge Base:
   232137  (http://support.microsoft.com/kb/232137/ ) How to Import a Server Certificate for Use in Internet Information Services 5.0
9. On node A, enable SSL.
10. On node A, run the IISSync command again.

For more information about other related issues and information, click the following article number to view the article in the Microsoft Knowledge Base: