thank you - this looks perfect
only problem i have is that the 'export private key' option is disabled - the steps above say that this is because its already been exported... but i havent tried to export it before - is there any way of retreiving the private key manually and manually bringing it over to the new server
btw i was able to export it without the private key and import it on the new server - but it obviously doesnt work without the key - so i was hoping there is some way to manually find and add the key to the new server
thanks!
Main Topics
Browse All Topics
by: humeniukPosted on 2005-06-11 at 09:59:42ID: 14195722
The first step is to export the cert from IIS 5.0:
1. Open a blank Microsoft Management Console (MMC).
2. Add the Certificates snap-in.
3. When you are prompted, select Computer Account and Local Computer.
4. Expand Personal, and then expand Certificates. A certificate with the name of your Web site appears in the "Issued To" column.
5. Right-click your certificate, click All Tasks, and then click Export.
6. In the Export window, click Next.
7. Click Yes, export the private key, and then click Next.
NOTE: If you do not have the option to click Yes in the Export Private Keys window, the private key has already been exported to another computer or the key never existed on this computer.
8. Select Personal Information Exchange, and then click to select the check boxes for all three options.
9. Assign a password and confirm it.
10. Assign a file name and location.
11. Click Finish. Make sure that you safeguard the file that you just created, because your ability to use the SSL protocol depends upon this file.
12. Copy the file that you created to new server.
(source - http://support.microsoft.c
Second step, import the certificate into the Win2k3 Local Computer Store:
1.On the IIS 6.0 Web server, click Start, and then click Run.
2.In the Open box, type mmc, and then click OK.
3.On the File menu click Add/Remove snap-in.
4.In the Add/Remove Snap-in dialog box, click Add.
5. In the Add Standalone Snap-in dialog box, click Certificates, and then click Add.
6.In the Certificates snap-in dialog box, click Computer account, and then click Next.
7. In the Select Computer dialog box, click Local computer: (the computer this console is running on), and then click Finish.
8. In the Add Standalone Snap-in dialog box, click Close.
9. In the Add/Remove Snap-in dialog box, click OK.
10. In the left pane of the console, double-click Certificates (Local Computer).
11. Right-click Personal, point to All Tasks, and then click Import.
12. On the Welcome to the Certificate Import Wizard page, click Next.
13. On the File to Import page, click Browse, locate your certificate file, and then click Next.
14. If the certificate has a password, type the password on the Password page, and then click Next.
15. On the Certificate Store page, click Place all certificates in the following store, and then click Next.
16. Click Finish, and then click OK to confirm that the import was successful.
(source - http://support.microsoft.c
Final step - assign the imported cert to the website:
1. Click Start, point to Administrative Tools, and then click Internet Information Services (IIS) Manager.
2. In the left pane, click your server.
3. In the right pane, double-click Web Sites.
4. In the right pane, right-click the Web site you want to assign the certificate to, and then click Properties.
5. Click Directory Security, and then click Server Certificate.
6. On the Welcome to the Web Certificate Wizard page, click Next.
7. On the Server Certificate page, click Assign an existing certificate, and then click Next.
8. On the Available Certificates page, click the installed certificate you want to assign to this Web site, and then click Next.
9. On the SSL Port page, configure the SSL port number. The default port of 443 is appropriate for most situations.
10. Click Next.
11. On the Certificate Summary page, review the information about the certificate, and then click Next.
12. On the Completing the Web Server Certificate Wizard page, click Finish, and then click OK.
(source - http://support.microsoft.c