Cannot bind a new certificate in IIS on EV server with error "A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520)"

Problem

Cannot bind a new certificate in IIS on EV server with error "A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520)"

Error Message

While selecting the new certificate in 443 IIS binding on EV server we can see below error

There was an error while performing this operation.

Details: 

A specified logon session does not exist. It may already have been terminated. (Exception from HRESULT: 0x80070520)

Cause

The installed certificate might be corrupt, so it needs to be re-imported

Solution

Note: the steps below involves deleting the EV server's certificate from the certificate store.  Care should be taken to ensure the correct certificate is chosen for deletion. Also please ensure that a good copy of the certificate is available in .pfx  format before starting the procedure.

1. From the Start screen, type and then click Run.
2. In the Run window, in the Open box, type mmc and then, click OK.
3. In the User Account Control window, click Yes to allow the Microsoft Management Console to make changes to the computer.
4. In the Console window, in the menu at the top, click File > Add/Remove Snap-in.
5. In the Add or Remove Snap-ins window, under Available snap-ins (left side), click Certificates and then, click Add.
6. In the Certificates snap-in window, select Computer account and then, click Next.
7. In the Select Computer window, select Local computer: (computer this console is running on), and then, click Finish.
8. In the Console window, in the Console Root section, expand Certificates (Local Computer).
9. Expand the Personal folder and then, find the affected certificate and right click delete the same
10. Now right click on the same place, All Tasks > Import to open the Certificate Import Wizard.
11. On the Welcome to the Certificate Import Wizard page, click Next.
12. Follow the instructions in the certificate import wizard to import your primary certificate from the .pfx file.
13. Mark the certificate as re-exportable and enter password if it is set to the certificate

Note: On the Certificate Store page, select Automatically select the certificate store based on the type of certificate.

14. On the Completing the Certificate Import Wizard page, verify your settings and then, click Finish.
15. A message stating The import was successful should be shown.
16. Restart the IIS service and reopen the IIS manager window.
17. Should now be able to bind the new certificate to 443 binding in IIS.

Note: If errors continue to occur they should be investigated with Microsoft.