WAC WinRM HTTPS - Enabling SMB Over Quic failed for a server managed by WAC

Question

Hi Guys,

I got WAC on a new server windows 2025 deployed with winRM HTTPS configured successfully, added a remote file server to WAC successfully too.. I can manage this file server on WAC without any errors, remote Powershell etc...however, when enabling SMB over Quic, I got this 500 error on Wac side.

On WAC, The error: The WinRM client received an HTTP server error status (500), but the remote service did not include any other information about the cause of the failure.

On the actual file server, the error: A fatal error occurred when attempting to access the TLS server credential private key. The error code returned from the cryptographic module is 0x8009030D. The internal error state is 10001. The SSPI client process is svchost[WinRM] (PID: 10136).

I got WAC server Kerberos Constraints Delegation configured and a SPN of HTTP etc on its AD objects. SMB over quic certificate deployed, Firewall rules to allow 443 all done.

Any idea why> ??

Thanks a lot

Larry