Link to home
Start Free TrialLog in
Avatar of lianne143
lianne143Flag for United States of America

asked on

Gererating CSR in IIS6

Hi  
We have Windows 2003 server with IIS6 installed on it and i want to generate a CSR for a particular FQDN. Now the instructions from  Go daddy says  http://help.godaddy.com/article/5277?  so. Within this IIS server we have installed two different web sites  with two different  FQDN the first one is office.cleeveschool.co.uk and the second is sports.cleeveschool.co.uk . I want generate CSR only for the office.cleeveschool.co.uk  and install the SSL . When i open IIS under Website folder i can see the default  web site  and if i expand  default under default website i can see office.cleeveschool.co.uk website. When i right click this wesite and properties ,under directory security i can see the server certificate tab greyed. where as if i go to sports.cleeveschool.co.uk wesite under iis under directory security i can see the server certificate tab enabled . But  i  need to generate CSR for office.cleeveschool.co.uk. But if i right click the default wesite and properties ,under directory security i can see the server certificate tab enabled.So Do i need to  generate CSR under default website  for office.cleeveschool.co.uk.
Any help appreciated
SOLUTION
Avatar of DominoG
DominoG
Flag of Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of lianne143

ASKER


If i go Go to ‘Web Sites’ -> right click on your sub-domain(office.cleeveschool.co.uk )  and select the ‘Properties’.  and

Go to the ‘Directory Security’ tab and then click on ‘Server Certificate, The server certficate is greyed out the edit option in enabled.

If i create the request a CSR under default wesite and apply the ssl to the default website will this cause problem to other wesite sports.cleeveschool.co.uk
Avatar of Brad Howe
Hi lianne143,

Based on your msg. sounds like you have your website setup like such.

Internet Information Services
    -> Web Sites
           --> Default WebSite
                       -->office.cleeveschool.co.uk
                       -->sports.cleeveschool.co.uk

This configuration is one website with 2 virtual directories. If it is setup this way,  please check to see if you are using an SSL certifcate on "Default Website" like such.

   1. Right click on Default Website.  
   2. Properites
   3. Tab Directory Security
   4. Under Secure Communications - Click on View Certificate. In there you will see the "issued to:
       www.somedomain.com".

  * IF this is greyed out, then SSL is not in use and you can generate a CSR request for it. and follow the instructions from Go Daddy to install it.

If it like this, then you are ok to make "office.cleeveschool.co.uk" its own SSL site. This also assumes that you are using host headers.

Internet Information Services
    -> Web Sites
           --> Default WebSite
           --> office.cleeveschool.co.uk
           --> sports.cleeveschool.co.uk

   1. Right click on Default Website.  
   2. Properites
   3. Tab Directory Security
   4. Click Server Certificate Wizard and generate a CSR.

Let me know which setup you have and we can get it working for you.

Cheers,
Hades666


Try right clicking on the domain rather than the subdomain, then add the subdomain later on in the process.
Thank you so much for you help
If i open the IIS It looks like the below:
Internet Information Services
    -> Web Sites  
           --> Default WebSite
                          -->office.cleeveschool.co.uk        

           -->  Microsoft Sharepoint

           --> sports.cleeveschool.co.uk


If i right click on -->office.cleeveschool.co.uk    
and go to properties ,under directory security i can see the server certificate tab greyed.

But if i right click  --> Default WebSite
and properties ,under directory security i can see the server certificate tab enabled.

Thanks and please let me know as how to proceed

But If i right click on -->sports.cleeveschool.co.uk    
and go to properties ,under directory security i can see the server certificate tab enabled.
but I dont  want to install SSl for this site.
Hi,

No worries, we like this stuff.

"But if i right click  --> Default WebSite  and properties ,under directory security i can see the server certificate tab enabled." -> If you view the certificate, is there one issued?

If not, then just go through the server certifcate wizard as mentioned in the above post by "DominoG" to generate a cert.csr. Once that is complete, send it to godaddy do be processed.

Then again from the post above, follow the instructions to apply it.

Cheers,
Hades666
Hi Thank for the info

But if i right click  --> Default WebSite  and properties ,under directory security i can see the server certificate tab enabled." ->  But the  view certificate is greyed

I built this server  and this is the first time me installing the SSL  on this server for this particular website

Cheers
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi
Thanks for your help
This server is in the DMZ. I followed the above steps.when i come to  the organizational unit , does this name needs  to be picked up automatically from our domain or can i put any name  here.

Thankyou
Put your department name in there.  e.g. Office
Yes, like DominoG stated, that info can be whatever you want. Just make it descriptive for you.

The parts are the first entry "NAME" and the third "commonname" - This should be the full URL for the site you want to secure.

Cheers,
Hades666
Sorted