Symptoms

When navigate to k2services/REST.svc , getting the following error after enabling Extended Protection for K2 Services: " Exception type: NotSupportedException Exception message: The extended protection settings configured on IIS do not match the settings configured on the transport. The ExtendedProtectionPolicy.PolicyEnforcement values do not match. IIS has a value of WhenSupported while the WCF Transport has a value of Never. "
 

Diagnoses

The error was caused by misconfiguration in the following section of the K2 Service - web.config:

<security mode="TransportCredentialOnly">

      <transport clientCredentialType="Windows" />

</security>
 

Resolution

Using the following setting for Rest service and disable http endpoint in the web.config resolved the issue.

<security mode="Transport">

     <transport clientCredentialType="None" />

</security>