Solved

How to Request/Apply New SSL Certificate in IIS 6 for Windows 2003

Posted on 2013-06-19
8
446 Views
Last Modified: 2013-06-20
We are currently running IIS 6.0 on Windows 2003 Server with Exchange 2003 for the purpose of accessing our emails via our smartphones and/or OWA.  It's recently been brought to my attention that our SSL certificate expired on 6/15/13.  I was told by our IT consultant that it'd be easiest to request a new certificate then to renew it.  I'm finding plenty of information on how to request a brand new certificate or renew an existing certificate, but I'm not certain about how to proceed if there's already an expired cert. in place.

At this point, I haven't heard of users not being able to access emails on their phones, but we do have some data collectors that our surveyors out in the field use that aren't.  My best guess is that I should choose to remove the current certificate while in the IIS Certificate Wizard, but wanted to confirm to help minimize potential downtime.

Thanks in advanced!
0
Comment
Question by:blugirl
  • 4
  • 4
8 Comments
 
LVL 3

Expert Comment

by:IKtech
ID: 39260889
what company did you buy the cert from?  If you call them and buy a new one, they will walk you through the request and then the install from iis.
0
 
LVL 3

Expert Comment

by:IKtech
ID: 39260894
don't worry about removal until you have the new one installed and you are using it.
0
 

Author Comment

by:blugirl
ID: 39260911
@IKtech - I'm not certain who the original company was as it was purchased by our consultant several years ago.  When I view the expired Certificate, it says it was issued by "Starfield Secure Certification Authority".  For consolidation purposes, I considered just purchasing it through SiteGround since that's where our domain is being managed & our website hosted.  But when I asked them about the steps, this was their response:

"Please note, that we cannot assist you with the installation of the SSL on your external server, once it has been issued."

and...

"You can have your network support assistant help you with the issuance of the CSR, and after that you can hand it to us so that we issue the SSL certificate from our vendor."

SG's support is usually fantastic & I understand that they have to draw the line on how much support to give...so I'm assuming that any other CA would say the same?
0
 

Author Comment

by:blugirl
ID: 39260964
@IKtech - I was told by our network support consultant that I needed to generate the CSR (Certificate Signing Request) request from our IIS server first. Is that not the case?
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 3

Accepted Solution

by:
IKtech earned 500 total points
ID: 39260995
That is correct i would make a cert request on the server from the IIS manager.  Once you have purchased the cert you will give the CSR (which is a text file) to the company that you bought the cert from and they will use it to produce a cert for you.  

Hope fully that makes sense.

I know you didn't buy the cert from digicert but their help docs should help a little

CSR creation
http://www.digicert.com/csr-creation-microsoft-outlook-web-access.htm

Install cert
http://www.digicert.com/ssl-certificate-installation-microsoft-iis-5-6.htm

this company also will try to help you with the above if you need it.
0
 

Author Comment

by:blugirl
ID: 39263661
@IKtech, I just went ahead & proceeded with ordering a new cert from DigiCert.  They were fantastic!  Great support, super knowledgeable & walked me right through it all!  Thanks for the tips!
0
 

Author Closing Comment

by:blugirl
ID: 39263672
The solution for me was simply to go through DigiCert!  They were super fast, friendly, knowledgeable & patient.  They made a potentially intimidating process easy!!
0
 
LVL 3

Expert Comment

by:IKtech
ID: 39263962
Great, glad to hear it!!
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Join & Write a Comment

Running classic asp applications under Windows Server 2008 R2 (x64) and IIS 7 is not as easy as one may think. It took me a while to figure it out while getting error 8002801d a few times. After you install the OS you will need to install the fol…
Since pre-biblical times, humans have sought ways to keep secrets, and share the secrets selectively.  This article explores the ways PHP can be used to hide and encrypt information.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now