Solved

Problem installing a SSL cert in IIS

Posted on 2008-10-08
2
1,935 Views
Last Modified: 2012-05-05
I've installed SSL certs plenty of times in IIS but this one's got me stumped. this is SBS 2003 SP2.

From the Default Website in IIS, I set up a cert request and went to Network Solutions and bought their SiteSafe SSL Certificate - Basic. When I downloaded the cert, it came in a zip file that contained the following 4 files:

AddTrustExternalCARoot.crt
mail.thiscompany.com.crt
NetworkSolutions_CA.crt
UTNAddTrustServer_CA.crt

I've never had to deal with these 4 files before when installing a cert but I'm willing to play whatever game is required to make this work now. This is the second cert, a re-issue, that my boss purchased from NetSol since the first attempt failed with IIS being unable to serve OWA or any web pages other than the companyweb he said.

But I'm guessing he went through the same process at NetSol that I did when he requested this cert (he's on vacation so I cannot talk to him right now), and this is the first time I've ever requested a cert from a CA where I didn't have to copy and paste that code that the IIS cert request contains in order to receive my cert from the CA. I'm wondering if this is related to why this cert is not working.

When I tried installing the first cert we received from NetSol, IIS said something like this response file doesnt contain what Im looking for or something to that effect. So I followed the instructions on NetSols site that walks you through opening the cert mmc console and importing the cert into (I think) the Personal  / Computer store and then going back into IIS and selecting Assign an existing certificate and that allowed me to install the cert but it also made IIS stop working properly as mentioned.

When I try to "Process the pending request" and I select this cert, IIS says: "Selected certificate was already installed to another server. Please, choose another response file."

1) Does it matter that these cert files have a .crt and not a .cer filename extension?
2) Does it matter that Network Solutions never asked for the cert request code that was generated by IIS?
3) Can anyone tell me how to get this cert installed please?

Thanks!


0
Comment
Question by:WineGeek
2 Comments
 
LVL 4

Accepted Solution

by:
palner earned 500 total points
ID: 22675650
How are you installing the certs? The best way on these would be to open MMC, add the certs module, and choose Computer.

Then right click on the personal folder and choose Import (for the personal ones).

It looks like AddTrustExternalCARoot.crt, NetworkSolutions_CA.crt, UTNAddTrustServer_CA.crt would want to be imported into the intermediate folder first.
0
 

Author Comment

by:WineGeek
ID: 22683192
I meant to delete this question. What I did wrong was to select the option that said their site was hosted at Network solutions when I should have selected their site was hosted elsewhere, which is why their SSL purchase process never asked me for the CSR that was generated by IIS.
0

Featured Post

Control application downtime with dependency maps

Visualize the interdependencies between application components better with Applications Manager's automated application discovery and dependency mapping feature. Resolve performance issues faster by quickly isolating problematic components.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Logparser is the smartest tool I have ever used in parsing IIS log files and there are many interesting things I wanted to share with everyone one of the  real-world  scenario from my current project. Let's get started with  scenario - How do w…
What is an ISAPI filter?   •      It's an assembly (.dll file) that can add or change the way IIS works.   •      They can be enabled globally for your web server or on a site-by-site basis.   When the IIS server receives a request, enabling the ISAPI fi…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now