IIS error 0x80070032 usually means IIS received a configuration request that Windows does not support. In the documented IIS Express case on Windows 11, TLS 1.3 conflicts with client-certificate renegotiation requested by SslNegotiateCert or SslRequireCert in applicationhost.config. Close Visual Studio, remove those flags when your application does not require client certificates, save the project configuration, and restart IIS Express. If the code appears with HTTP 500.19 or continues after that change, inspect the exact HRESULT, file, and line reported by IIS and then validate configuration, modules, section locking, files, and permissions.
What IIS error 0x80070032 means
Microsoft translates 0x80070032 as ERROR_NOT_SUPPORTED. The related message may appear as “The request is not supported (0x80070032)”. In the IIS Express problem documented by Microsoft, the trigger is a compatibility conflict rather than a missing application feature: Windows 11 uses TLS 1.3, while the IIS Express configuration asks for client-certificate renegotiation through SslNegotiateCert or SslRequireCert.
As an Amazon Associate I earn from qualifying purchases.
This is most likely when a Visual Studio project runs under IIS Express and its project-local applicationhost.config contains one of those flags. It is not safe to assume that every occurrence has the same cause. Full IIS, another Windows build, a malformed configuration file, a locked section, or a missing module can produce a different symptom even when the visible code is similar.
First, identify which IIS setup is failing
| Question | IIS Express answer | Full IIS answer |
|---|---|---|
| Where is configuration commonly controlled? | The project’s .vs[project name]configapplicationhost.config. |
Server-level ApplicationHost.config and distributed Web.config files at site, application, and virtual-directory levels. |
| Typical management path | Stop the Visual Studio site, edit the project-local file, then restart IIS Express. | Inspect the effective configuration and the detailed IIS error page before changing server policy. |
| Most relevant 0x80070032 cause in the documented case | Windows 11 TLS 1.3 versus client-certificate renegotiation flags. | Not established by the IIS Express case; investigate the exact HRESULT and configuration location. |
| Can symptoms differ? | Yes. IIS Express and full IIS do not always expose the same error or use the same management path. | Yes. A server-level or inherited setting can affect multiple sites. |
If the error appears only when pressing Start or debugging a Visual Studio project, begin with the IIS Express procedure below. If a deployed site reports HTTP 500.19, or the error page names a server-level file, use the 500.19 and effective-configuration checks after the IIS Express procedure.
#1 Best Overall
- Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
- Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
- Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
- Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
- 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.
Primary fix for IIS Express on Windows 11
Use this change only when the application does not explicitly need client-certificate authentication. The flags control a security feature; removing them from a project that genuinely requires client certificates changes the authentication behavior and is not an appropriate workaround.
- Stop the site. Stop debugging and close the running IIS Express site. Exit Visual Studio so it does not overwrite the file while you edit it.
- Open the project configuration. In the solution directory, open
.vs[project name]configapplicationhost.config. The.vsdirectory may be hidden in File Explorer, so enable hidden items if necessary. Open the file in an editor that preserves XML text. - Find the access element. Search for
system.webServer/security/access. Inspect itssslFlagsattribute rather than changing unrelated sections. - Check for the two client-certificate flags. Look for
SslNegotiateCert,SslRequireCert, or both in the value. These are the settings implicated in the documented TLS 1.3 incompatibility. - Remove only the unsupported requests. When client certificates are not required, remove
SslNegotiateCertand/orSslRequireCertfromsslFlags. Keep the rest of the existing value and XML structure intact. Do not delete the entiresystem.webServer/security/accesselement simply to make the error disappear. - Save the file. Confirm that the editor saved valid XML and that the file remains in the project’s
.vsconfiguration directory. - Restart the development environment. Reopen Visual Studio, start the project under IIS Express, and repeat the request that previously failed.
- Check the result. If the site starts and the request succeeds, the TLS 1.3/client-certificate flag conflict was the practical cause. If the same code remains, record the complete error page, including whether it says HTTP 500.19, the HRESULT, the configuration file, and the line number before making another change.
Why removing the flags works in this case
SslNegotiateCert and SslRequireCert ask IIS Express to perform client-certificate behavior that is not supported by TLS 1.3 in the documented Windows 11 scenario. Removing the request lets IIS Express use a compatible configuration when the application does not need certificate-based client authentication. The change addresses the project’s local IIS Express settings; it does not repair arbitrary XML errors or server-wide IIS problems.
Rank #2
- 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
- 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
- Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
- 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
- What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.
If the application really requires client certificates
Do not blindly remove the flags and do not blindly add them back. First establish whether the application’s authentication design requires a client certificate for the affected endpoint. If it does, the IIS Express workaround may not be acceptable because it disables the requested behavior.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →- Keep a copy of the original project configuration so the security setting can be restored deliberately.
- Confirm with the application or server administrator which endpoints require client certificates and whether the project is expected to run under IIS Express at all.
- Test a configuration compatible with the target Windows and IIS version. The documented IIS Express conflict is version- and protocol-dependent, so a setting that works on an older environment may not work on Windows 11 with TLS 1.3.
- Use the target server’s supported certificate-authentication design rather than treating an unsupported renegotiation request as a generic error to suppress.
- After each test, capture the detailed IIS result and verify both outcomes: the site must start, and the required client-certificate policy must still be enforced.
If there is no administrator who can confirm the required certificate behavior, stop before changing authentication flags on a shared or production server. The error code alone does not tell you whether client certificates are a business requirement.
Rank #3
- Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
- Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
- Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
- Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
- What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.
When the message is HTTP 500.19 or the first fix does not work
HTTP 500.19 indicates that IIS could not read or apply configuration. Microsoft lists several possible causes: malformed XML, an unrecognized module, a locked configuration section, duplicate entries, a missing file, or insufficient permissions. These causes can exist independently of the TLS 1.3 issue, so use the detailed error page rather than repeatedly editing sslFlags.
Read the detailed error page
- Record the exact HRESULT. Confirm whether it is
0x80070032or another code shown alongside HTTP 500.19. - Record the configuration file named by IIS and the line or column number. A project-local
applicationhost.config, a server-levelApplicationHost.config, and a site or applicationWeb.configrequire different owners and change paths. - Note the section IIS identifies. If the page names a module, duplicate entry, or locked section, follow that specific clue instead of changing unrelated settings.
Validate XML before changing policy
Inspect both Web.config and ApplicationHost.config when the error page points to them. Check that elements are correctly nested and closed, attribute quotes are paired, and recent edits did not leave duplicate or misspelled entries. Preserve a known-good copy before making corrections so you can revert a failed edit.
Rank #4
- Dual Converters, Infinite Potential：Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
- Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
- Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
- Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
- Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft
Check referenced modules
If the error identifies an unrecognized module, verify that the module named in the configuration is installed and available to the IIS instance serving the request. Removing a module entry may make the page load but can also remove required application behavior, so confirm whether the application depends on it before deleting anything.
Check section locking
IIS configuration is hierarchical, and a server administrator can lock sections so lower-level files cannot override them. If the detailed page reports a locked section, do not change server-wide policy from a project file. Ask the administrator to review the lock and decide whether the lower-level setting is permitted.
Best Value
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
Check files and permissions
Confirm that every file referenced by the failing configuration exists at the expected location and that the IIS process can read it. A missing file or an access-denied condition can produce HTTP 500.19 even when the XML itself is valid. Correct the path or permissions only after identifying which account and file the error page names.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Inspect the effective IIS configuration with AppCmd
A file can look correct while an inherited setting, duplicate entry, or server-level restriction changes the result. Microsoft documents this AppCmd command for inspecting the effective system.webServer configuration:
%windir%system32inetsrvappcmd list config /section:system.webServerRun it in an elevated Command Prompt where IIS management tools are available. The output helps show what IIS is actually applying after combining configuration levels. Compare the reported settings with the file and line identified by the error page.
How to use the output safely
- Save or copy the output before editing so you have a record of the effective state.
- Find the relevant
security/accessandsslFlagsentries, along with any section or module named by HTTP 500.19. - Determine whether the value comes from a server-level file or a distributed
Web.config. IIS can inherit settings through the site, application, and virtual-directory hierarchy. - Change the narrowest configuration level that meets the requirement. Avoid changing server-wide settings to solve one project’s IIS Express problem.
- Restart or recycle the affected IIS process as appropriate, then retest and capture a fresh detailed error if it fails again.
Configuration hierarchy: why the same edit can have different results
IIS does not read one isolated file. Settings may originate in server-level ApplicationHost.config or in distributed Web.config files at the site, application, and virtual-directory levels. A lower-level file can inherit a setting, override an allowed setting, or be prevented from changing a locked section. This is why an edit in a Visual Studio project’s .vs directory can fix IIS Express while leaving full IIS unchanged.
Use the scope of the failing process as the boundary for your fix:
Quick Recap
- Local IIS Express project: edit the project-local file after stopping Visual Studio and IIS Express.
- Full IIS site: identify the server, site, application, and virtual-directory level named by the detailed error before changing configuration.
- Shared server: involve the administrator when a section is locked or when a change would affect multiple sites.
Decision guide for the common cases
| Observed situation | Next action | Do not do |
|---|---|---|
| Visual Studio/IIS Express on Windows 11, no client certificates required | Remove SslNegotiateCert and/or SslRequireCert from the project-local sslFlags, then restart. |
Do not delete the entire access section. |
| Visual Studio/IIS Express, client certificates are required | Keep the requirement documented and test a configuration compatible with the target Windows/IIS version with administrator guidance. | Do not remove the flags as a permanent security change without approval. |
| HTTP 500.19 names malformed XML or a line number | Validate the named Web.config or ApplicationHost.config and correct the syntax. |
Do not assume TLS is the cause. |
| HTTP 500.19 names a module | Verify that the referenced IIS module is installed and available. | Do not remove a required module entry merely to hide the error. |
| HTTP 500.19 names a locked section | Ask the server administrator to review section locking and the intended scope. | Do not override server policy from a lower-level file. |
| Error persists with an unclear source | Run AppCmd, compare effective configuration with the detailed error, and isolate the failing level. | Do not make repeated unrelated edits without recording each result. |
Recovery and verification checklist
- Stop Visual Studio and IIS Express before editing a project-local configuration file.
- Keep a backup or version-control copy of the original XML.
- Change only the relevant
sslFlagsvalues when the TLS 1.3 conflict applies. - Restart the affected IIS process after saving.
- Retest the exact URL or operation that failed, not just the development server’s startup page.
- If the error changes to HTTP 500.19, use the new HRESULT, file, and line as the next diagnostic target.
- For full IIS, confirm whether the setting is inherited or locked before changing it.
- For certificate-authenticated applications, verify that the required certificate policy still works after every configuration change.
As an optional shortcut after trying the manual steps, Outbyte PC Repair can address some common Windows configuration issues, clean temporary and cache files, check settings and missing updates, and provide an app-crash log. It complements antivirus software rather than replacing it; results vary, and no tool repairs every crash. It runs on Windows 11, 10, 8 and 7, with a free trial by category of at least two days before a subscription.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
