Solved

add a new SSL certificate to ISA 2006

Posted on 2010-09-02
4
815 Views
Last Modified: 2012-05-10
Hi,

We have added the new SSL certificate to IIS on our public Win2k3 IIS server (inside ou=r network), but it also needs to be added to ISA.

We will need to add these to all listeners with a *.xyz.edu domain name on our ISA server (e.g. alumni.xyz.edu, www.xyz.edu, abc.xyz.edu, etc.)

We have used 3rd party's certificate service (we don't have our own PKI and Root CA service), I would like to know the followings:

1.) What are the procedures to add the new certificate to all listeners with a *.xyz.edu domain name on our ISA server?
2.) What's the risk if something goes wrong?
3.) How to roll it back to the current existing certificate.

I have to be extremely careful as its impact is enormous (we are talking about public web server here).

Any information and help would be much appreciated.

Thanks in advance.

Regards

John

 

0
Comment
Question by:mbsadmin1
  • 2
4 Comments
 
LVL 34

Accepted Solution

by:
Shreedhar Ette earned 250 total points
ID: 33593521
Hi,

Refer this article:
http://www.isaserver.org/articles/exportsslcert.html

Hope this helps,
Shree
0
 

Author Comment

by:mbsadmin1
ID: 33593713
Hi shreedhar,

thanks for your info. but i think the url you gave me is referring to ISA2004. Are the same procedures for  ISA 2004 &2006?

Cheers

John
0
 
LVL 10

Expert Comment

by:simonlimon
ID: 33607608
First import the new certificate in the machine store on the is server, replace the certificate on the listener and that should be it. You also have to import the root cert to the is, if it is not already there.

0
 

Author Closing Comment

by:mbsadmin1
ID: 33925417
Hi Shreedhar,

I think your info is more relevant to the question , even though it's not 100% accurate.

Thanks.

Regards

John
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In all versions of ISA Server and the current version of FTMG, the default https protocol uses TCP port 443 and 563 only. This cannot be changed within the ISA or FTMG GUI and must be completed from a Windows cmd prompt on the ISA Server itself. …
#SSL #TLS #Citrix #HTTPS #PKI #Compliance #Certificate #Encryption #StoreFront #Web Interface #Citrix XenApp
This video demonstrates how to create an example email signature rule for a department in a company using CodeTwo Exchange Rules. The signature will be inserted beneath users' latest emails in conversations and will be displayed in users' Sent Items…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now