Solved

Problem installing a SSL cert in IIS

Posted on 2008-10-08
2
1,955 Views
Last Modified: 2012-05-05
I've installed SSL certs plenty of times in IIS but this one's got me stumped. this is SBS 2003 SP2.

From the Default Website in IIS, I set up a cert request and went to Network Solutions and bought their SiteSafe SSL Certificate - Basic. When I downloaded the cert, it came in a zip file that contained the following 4 files:

AddTrustExternalCARoot.crt
mail.thiscompany.com.crt
NetworkSolutions_CA.crt
UTNAddTrustServer_CA.crt

I've never had to deal with these 4 files before when installing a cert but I'm willing to play whatever game is required to make this work now. This is the second cert, a re-issue, that my boss purchased from NetSol since the first attempt failed with IIS being unable to serve OWA or any web pages other than the companyweb he said.

But I'm guessing he went through the same process at NetSol that I did when he requested this cert (he's on vacation so I cannot talk to him right now), and this is the first time I've ever requested a cert from a CA where I didn't have to copy and paste that code that the IIS cert request contains in order to receive my cert from the CA. I'm wondering if this is related to why this cert is not working.

When I tried installing the first cert we received from NetSol, IIS said something like this response file doesnt contain what Im looking for or something to that effect. So I followed the instructions on NetSols site that walks you through opening the cert mmc console and importing the cert into (I think) the Personal  / Computer store and then going back into IIS and selecting Assign an existing certificate and that allowed me to install the cert but it also made IIS stop working properly as mentioned.

When I try to "Process the pending request" and I select this cert, IIS says: "Selected certificate was already installed to another server. Please, choose another response file."

1) Does it matter that these cert files have a .crt and not a .cer filename extension?
2) Does it matter that Network Solutions never asked for the cert request code that was generated by IIS?
3) Can anyone tell me how to get this cert installed please?

Thanks!


0
Comment
Question by:WineGeek
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 4

Accepted Solution

by:
palner earned 500 total points
ID: 22675650
How are you installing the certs? The best way on these would be to open MMC, add the certs module, and choose Computer.

Then right click on the personal folder and choose Import (for the personal ones).

It looks like AddTrustExternalCARoot.crt, NetworkSolutions_CA.crt, UTNAddTrustServer_CA.crt would want to be imported into the intermediate folder first.
0
 

Author Comment

by:WineGeek
ID: 22683192
I meant to delete this question. What I did wrong was to select the option that said their site was hosted at Network solutions when I should have selected their site was hosted elsewhere, which is why their SSL purchase process never asked me for the CSR that was generated by IIS.
0

Featured Post

Free NetCrunch network monitor licenses!

Only on Experts-Exchange: Sign-up for a free-trial and we'll send you your permanent license!

Here is what you get: 30 Nodes | Unlimited Sensors | No Time Restrictions | Absolutely FREE!

Act now. This offer ends July 14, 2017.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Prologue It is often required to host multiple websites on a single instance of IIS, mostly in development environments instead of on production servers. I am sure it is not much a preferred solution on production servers but this is at least a pos…
When it comes to showing a 404 error page to your visitors, you do not want that generic page to show, and you especially do not want your hosting provider’s ad error page to show either. In this article, I will show you how to enable the custom 40…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

689 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question