Solved

How to Request/Apply New SSL Certificate in IIS 6 for Windows 2003

Posted on 2013-06-19
8
455 Views
Last Modified: 2013-06-20
We are currently running IIS 6.0 on Windows 2003 Server with Exchange 2003 for the purpose of accessing our emails via our smartphones and/or OWA.  It's recently been brought to my attention that our SSL certificate expired on 6/15/13.  I was told by our IT consultant that it'd be easiest to request a new certificate then to renew it.  I'm finding plenty of information on how to request a brand new certificate or renew an existing certificate, but I'm not certain about how to proceed if there's already an expired cert. in place.

At this point, I haven't heard of users not being able to access emails on their phones, but we do have some data collectors that our surveyors out in the field use that aren't.  My best guess is that I should choose to remove the current certificate while in the IIS Certificate Wizard, but wanted to confirm to help minimize potential downtime.

Thanks in advanced!
0
Comment
Question by:blugirl
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:IKtech
ID: 39260889
what company did you buy the cert from?  If you call them and buy a new one, they will walk you through the request and then the install from iis.
0
 
LVL 3

Expert Comment

by:IKtech
ID: 39260894
don't worry about removal until you have the new one installed and you are using it.
0
 

Author Comment

by:blugirl
ID: 39260911
@IKtech - I'm not certain who the original company was as it was purchased by our consultant several years ago.  When I view the expired Certificate, it says it was issued by "Starfield Secure Certification Authority".  For consolidation purposes, I considered just purchasing it through SiteGround since that's where our domain is being managed & our website hosted.  But when I asked them about the steps, this was their response:

"Please note, that we cannot assist you with the installation of the SSL on your external server, once it has been issued."

and...

"You can have your network support assistant help you with the issuance of the CSR, and after that you can hand it to us so that we issue the SSL certificate from our vendor."

SG's support is usually fantastic & I understand that they have to draw the line on how much support to give...so I'm assuming that any other CA would say the same?
0
Webinar: Aligning, Automating, Winning

Join Dan Russo, Senior Manager of Operations Intelligence, for an in-depth discussion on how Dealertrack, leading provider of integrated digital solutions for the automotive industry, transformed their DevOps processes to increase collaboration and move with greater velocity.

 

Author Comment

by:blugirl
ID: 39260964
@IKtech - I was told by our network support consultant that I needed to generate the CSR (Certificate Signing Request) request from our IIS server first. Is that not the case?
0
 
LVL 3

Accepted Solution

by:
IKtech earned 500 total points
ID: 39260995
That is correct i would make a cert request on the server from the IIS manager.  Once you have purchased the cert you will give the CSR (which is a text file) to the company that you bought the cert from and they will use it to produce a cert for you.  

Hope fully that makes sense.

I know you didn't buy the cert from digicert but their help docs should help a little

CSR creation
http://www.digicert.com/csr-creation-microsoft-outlook-web-access.htm

Install cert
http://www.digicert.com/ssl-certificate-installation-microsoft-iis-5-6.htm

this company also will try to help you with the above if you need it.
0
 

Author Comment

by:blugirl
ID: 39263661
@IKtech, I just went ahead & proceeded with ordering a new cert from DigiCert.  They were fantastic!  Great support, super knowledgeable & walked me right through it all!  Thanks for the tips!
0
 

Author Closing Comment

by:blugirl
ID: 39263672
The solution for me was simply to go through DigiCert!  They were super fast, friendly, knowledgeable & patient.  They made a potentially intimidating process easy!!
0
 
LVL 3

Expert Comment

by:IKtech
ID: 39263962
Great, glad to hear it!!
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you don't have the right permissions set for your WordPress location in IIS, you won't be able to perform automatic updates. Here's how to fix the problem.
If you are a web developer, you would be aware of the <iframe> tag in HTML. The <iframe> stands for inline frame and is used to embed another document within the current HTML document. The embedded document could be even another website.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Add bar graphs to Access queries using Unicode block characters. Graphs appear on every record in the color you want. Give life to numbers. Hopes this gives you ideas on visualizing your data in new ways ~ Create a calculated field in a query: …

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question