Hi All,

I published Biztalk orchestration as wcf service using biztalk wcf publishing wizard, it is working fine with http protocol with anonymous authentication.

Now i want convert this service over SSL. I installed domain certificate and assigned to https in IIS and able to browse, But when i consume wcf client it giving the error as follows.

Error: Cannot obtain Metadata from https://MyServerName/ServiceSSLTest/WcfService_ServiceSSLTest.svc If this is a Windows (R) Communication Foundation service to which you have access, please check that you have enabled metadata publishing at the specified address.  For help enabling metadata publishing, please refer to the MSDN documentation at http://go.microsoft.com/fwlink/?LinkId=65455.WS-Metadata Exchange Error    URI: https:/MyServerName/ServiceSSLTest/WcfService_ServiceSSLTest.svc    Metadata contains a reference that cannot be resolved: 'https://MyServerName/ServiceSSLTest/WcfService_ServiceSSLTest.svc'.    There was no endpoint listening at https:/MyServerName/ServiceSSLTest/WcfService_ServiceSSLTest.svc that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.    The remote server returned an error: (404) Not Found.HTTP GET Error    URI: https:/MyServerName/ServiceSSLTest/WcfService_ServiceSSLTest.svc    The document was understood, but it could not be processed.  - The WSDL document contains links that could not be resolved.  - There was an error downloading 'http://MyServerName/ServiceSSLTest/WcfService_ServiceSSLTest.svc?xsd=xsd2'.  - The request failed with HTTP status 403: Forbidden.

Following is web.config File.

<?xml version="1.0" encoding="utf-8"?><!--     Note: As an alternative to hand editing this file you can use the     web admin tool to configure settings for your application. Use    the Website->Asp.Net Configuration option in Visual Studio.    A full list of settings and comments can be found in     machine.config.comments usually located in     \Windows\Microsoft.Net\Framework\v2.x\Config --><configuration xmlns="http://schemas.microsoft.com/.NetConfiguration/v2.0">  <!--    The <configSections> section declares handlers for custom configuration sections.  -->  <configSections>    <section name="bizTalkSettings" type="Microsoft.BizTalk.Adapter.Wcf.Runtime.BizTalkConfigurationSection, Microsoft.BizTalk.Adapter.Wcf.Runtime, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />  </configSections>  <!--    The <bizTalkSettings> section specifies BizTalk specific configuration.  -->  <bizTalkSettings>    <!--      mexServiceHostFactory debug:      Set to "true" to launch debugger when MexServiceHostFactory.CreateServiceHost(...) is called by IIS.      Used to debug from initial point of activation by IIS.      Default value is "false" for normal operation.    -->    <mexServiceHostFactory debug="false">      <receiveLocationMappings>        <!--add markupFileName="*.svc" receiveLocationName="?" publicBaseAddress="protocol://host[:port]" /-->      </receiveLocationMappings>    </mexServiceHostFactory>    <!--      webServiceHostFactory debug:      Set to "true" to launch debugger when WebServiceHostFactory.CreateServiceHost(...) is called by IIS.      Used to debug from initial point of activation by IIS.      Default value is "false" for normal operation.    -->    <webServiceHostFactory debug="false" />    <!--      isolatedReceiver disable:      Set to "true" to skip IBTTransportProxy.RegisterIsolatedReceiver(...) and IBTTransportProxy.TerminateIsolatedReceiver(...) calls.      Used for testing metadata exchange without having to setup receive location.      Default value is "false" for normal operation.    -->    <isolatedReceiver disable="false" />    <!--      btsWsdlExporter disable:      Set to "true" to skip adding BtsWsdlExporter behavior extension to service endpoint.      Used for testing or comparing strongly-typed WSDL customization versus weakly-typed WSDL of generic WCF service.      Default value is "false" for normal operation.    -->    <btsWsdlExporter disable="false" />  </bizTalkSettings>  <appSettings />  <connectionStrings />  <system.web>    <!--       Set compilation debug="true" to insert debugging symbols into the compiled page.      Because this affects performance, set this value to true only during development.    -->    <compilation defaultLanguage="c#" debug="false">      <assemblies>        <add assembly="mscorlib, version=2.0.0.0, culture=neutral, publickeytoken=b77a5c561934e089" />        <add assembly="Microsoft.BizTalk.Adapter.Wcf.Common, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />        <add assembly="Microsoft.BizTalk.Adapter.Wcf.Runtime, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />      </assemblies>    </compilation>    <!--      The <authentication> section enables configuration of the security authentication mode      used by ASP.NET to identify an incoming user.    -->    <authentication mode="Windows" />    <!--      The <customErrors> section enables configuration of what to do if/when an unhandled error      occurs during the execution of a request. Specifically, it enables developers to configure      html error pages to be displayed in place of a error stack trace.    -->    <!--    <customErrors mode="RemoteOnly" defaultRedirect="GenericErrorPage.htm">      <error statusCode="403" redirect="NoAccess.htm" />      <error statusCode="404" redirect="FileNotFound.htm" />    </customErrors>    -->  </system.web>  <!--    The <system.serviceModel> section specifies Windows Communication Foundation (WCF) configuration.  -->  <system.serviceModel>    <behaviors>      <serviceBehaviors>        <behavior name="ServiceBehaviorConfiguration">          <serviceDebug httpHelpPageEnabled="true" httpsHelpPageEnabled="false" includeExceptionDetailInFaults="false" />          <serviceMetadata httpGetEnabled="true" httpsGetEnabled="true" />        </behavior>      </serviceBehaviors>    </behaviors>     <services>       <service name="Microsoft.BizTalk.Adapter.Wcf.Runtime.BizTalkServiceInstance" behaviorConfiguration="ServiceBehaviorConfiguration">         <endpoint name="HttpsMexEndpoint" address="mex" binding="basicHttpBinding" bindingConfiguration="CustomBasicBinding" contract="IMetadataExchange" />       </service>    </services>    <bindings>      <basicHttpBinding>        <binding name="CustomBasicBinding">          <security mode="TransportCredentialOnly">            <transport clientCredentialType="Windows" />          </security>        </binding>      </basicHttpBinding>    </bindings>  </system.serviceModel>  <system.webServer>    <directoryBrowse enabled="true" />  </system.webServer></configuration>

please help me resolve the issue.

Thanks in advance.

Radhakrishna