How to Request/Apply New SSL Certificate in IIS 6 for Windows 2003

We are currently running IIS 6.0 on Windows 2003 Server with Exchange 2003 for the purpose of accessing our emails via our smartphones and/or OWA.  It's recently been brought to my attention that our SSL certificate expired on 6/15/13.  I was told by our IT consultant that it'd be easiest to request a new certificate then to renew it.  I'm finding plenty of information on how to request a brand new certificate or renew an existing certificate, but I'm not certain about how to proceed if there's already an expired cert. in place.

At this point, I haven't heard of users not being able to access emails on their phones, but we do have some data collectors that our surveyors out in the field use that aren't.  My best guess is that I should choose to remove the current certificate while in the IIS Certificate Wizard, but wanted to confirm to help minimize potential downtime.

Thanks in advanced!
blugirlAsked:
Who is Participating?
 
IKtechCommented:
That is correct i would make a cert request on the server from the IIS manager.  Once you have purchased the cert you will give the CSR (which is a text file) to the company that you bought the cert from and they will use it to produce a cert for you.  

Hope fully that makes sense.

I know you didn't buy the cert from digicert but their help docs should help a little

CSR creation
http://www.digicert.com/csr-creation-microsoft-outlook-web-access.htm

Install cert
http://www.digicert.com/ssl-certificate-installation-microsoft-iis-5-6.htm

this company also will try to help you with the above if you need it.
0
 
IKtechCommented:
what company did you buy the cert from?  If you call them and buy a new one, they will walk you through the request and then the install from iis.
0
 
IKtechCommented:
don't worry about removal until you have the new one installed and you are using it.
0
How do you know if your security is working?

Protecting your business doesn’t have to mean sifting through endless alerts and notifications. With WatchGuard Total Security Suite, you can feel confident that your business is secure, meaning you can get back to the things that have been sitting on your to-do list.

 
blugirlAuthor Commented:
@IKtech - I'm not certain who the original company was as it was purchased by our consultant several years ago.  When I view the expired Certificate, it says it was issued by "Starfield Secure Certification Authority".  For consolidation purposes, I considered just purchasing it through SiteGround since that's where our domain is being managed & our website hosted.  But when I asked them about the steps, this was their response:

"Please note, that we cannot assist you with the installation of the SSL on your external server, once it has been issued."

and...

"You can have your network support assistant help you with the issuance of the CSR, and after that you can hand it to us so that we issue the SSL certificate from our vendor."

SG's support is usually fantastic & I understand that they have to draw the line on how much support to give...so I'm assuming that any other CA would say the same?
0
 
blugirlAuthor Commented:
@IKtech - I was told by our network support consultant that I needed to generate the CSR (Certificate Signing Request) request from our IIS server first. Is that not the case?
0
 
blugirlAuthor Commented:
@IKtech, I just went ahead & proceeded with ordering a new cert from DigiCert.  They were fantastic!  Great support, super knowledgeable & walked me right through it all!  Thanks for the tips!
0
 
blugirlAuthor Commented:
The solution for me was simply to go through DigiCert!  They were super fast, friendly, knowledgeable & patient.  They made a potentially intimidating process easy!!
0
 
IKtechCommented:
Great, glad to hear it!!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.