asked on

SSL Certificate for Windows Server 2003 SBS

I have a Server 2003. We allow access to it from the web. We had an SSL Certifcate, but it is expired.
I need to replace it.

I was told since it was expired I could not renew it, just to get a new one.

Fine, so where in Administration do I go to generate a Certificate Request?

ASKER CERTIFIED SOLUTION

rage419

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

jimmysupport

ASKER

You know what is strange, the first page you connect to is not secure..since the certificate has expired I guess,
but the actual log-in page is secure....do I actually need a Certificate?

take a look:

www.easternmercantile.com/cnet then click to the server.

jimmysupport

ASKER

oops...now it can't find the server...could that be because I deleted the certificate it had?
It was working just a few minutes ago.

rage419

Have you gotten a new cert from a CA now and completed the process of feeding IIS the reply from your request?

rage419

About the cert, yes - the site login requires SSL and SSL does not work without a cert (invalid date certs still *do* encrypt data, though it's shelf life is over)

jimmysupport

ASKER

Wow, didn't know that...oh, well.
I only have one employee who needs to get in...she can go in via Remote Desktop.

rage419

You could poke around on the server for the certificate that was unbound from IIS from the renewal process maybe. Even though it's expired, would get you going till it could be sorted. Any .cer files on there?

lludden

If just for one internal user, use SelfSSL from resource kit to roll your own ssl.

http://www.microsoft.com/technet/prodtechnol/WindowsServer2003/Library/IIS/993a8a36-5761-448f-889e-9ae58d072c09.mspx?mfr=true

jimmysupport

ASKER

rage419 - you were such a help. Everything you said was right on.
One more question though...I got a new Certificate
It was issued to cnet.easternmercantile.com, so when it hits the server it says the name is different.
Can I simply change the name in IIS from default website to cnet.easternmercantile.com?

jimmysupport

ASKER

And further - when we hit the default page, it does not show the lock on the browser - how come, because of the name?

rage419

To ge the dfault page locked, one would have to enter https// as part of the URL or be redirected via script. If you entered your site with HTTPS:// and SSL is working, you should see the lock.

For the cert to match the site, this is not longer IIS's deal anymore really. The name on the cert must match the hostname of the entry that was used to get to the site.

So for a cert issued to bob.com, if I enter the IP, or anything NOT ending in bob.com when accessing the site protected by the aforementioned cert, - error! (but it still encrypts)