WineGeek
asked on
Problem installing a SSL cert in IIS
I've installed SSL certs plenty of times in IIS but this one's got me stumped. this is SBS 2003 SP2.
From the Default Website in IIS, I set up a cert request and went to Network Solutions and bought their SiteSafe SSL Certificate - Basic. When I downloaded the cert, it came in a zip file that contained the following 4 files:
AddTrustExternalCARoot.crt
mail.thiscompany.com.crt
NetworkSolutions_CA.crt
UTNAddTrustServer_CA.crt
I've never had to deal with these 4 files before when installing a cert but I'm willing to play whatever game is required to make this work now. This is the second cert, a re-issue, that my boss purchased from NetSol since the first attempt failed with IIS being unable to serve OWA or any web pages other than the companyweb he said.
But I'm guessing he went through the same process at NetSol that I did when he requested this cert (he's on vacation so I cannot talk to him right now), and this is the first time I've ever requested a cert from a CA where I didn't have to copy and paste that code that the IIS cert request contains in order to receive my cert from the CA. I'm wondering if this is related to why this cert is not working.
When I tried installing the first cert we received from NetSol, IIS said something like this response file doesnt contain what Im looking for or something to that effect. So I followed the instructions on NetSols site that walks you through opening the cert mmc console and importing the cert into (I think) the Personal / Computer store and then going back into IIS and selecting Assign an existing certificate and that allowed me to install the cert but it also made IIS stop working properly as mentioned.
When I try to "Process the pending request" and I select this cert, IIS says: "Selected certificate was already installed to another server. Please, choose another response file."
1) Does it matter that these cert files have a .crt and not a .cer filename extension?
2) Does it matter that Network Solutions never asked for the cert request code that was generated by IIS?
3) Can anyone tell me how to get this cert installed please?
Thanks!
From the Default Website in IIS, I set up a cert request and went to Network Solutions and bought their SiteSafe SSL Certificate - Basic. When I downloaded the cert, it came in a zip file that contained the following 4 files:
AddTrustExternalCARoot.crt
mail.thiscompany.com.crt
NetworkSolutions_CA.crt
UTNAddTrustServer_CA.crt
I've never had to deal with these 4 files before when installing a cert but I'm willing to play whatever game is required to make this work now. This is the second cert, a re-issue, that my boss purchased from NetSol since the first attempt failed with IIS being unable to serve OWA or any web pages other than the companyweb he said.
But I'm guessing he went through the same process at NetSol that I did when he requested this cert (he's on vacation so I cannot talk to him right now), and this is the first time I've ever requested a cert from a CA where I didn't have to copy and paste that code that the IIS cert request contains in order to receive my cert from the CA. I'm wondering if this is related to why this cert is not working.
When I tried installing the first cert we received from NetSol, IIS said something like this response file doesnt contain what Im looking for or something to that effect. So I followed the instructions on NetSols site that walks you through opening the cert mmc console and importing the cert into (I think) the Personal / Computer store and then going back into IIS and selecting Assign an existing certificate and that allowed me to install the cert but it also made IIS stop working properly as mentioned.
When I try to "Process the pending request" and I select this cert, IIS says: "Selected certificate was already installed to another server. Please, choose another response file."
1) Does it matter that these cert files have a .crt and not a .cer filename extension?
2) Does it matter that Network Solutions never asked for the cert request code that was generated by IIS?
3) Can anyone tell me how to get this cert installed please?
Thanks!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER