asked on

SSL certificate not SHowing in IIS8.5

I am trying to install certificates on a web server, The web server is IIS8.5 on a windows 2012R2 server.

I initiated the certificate via IIS and completed it as required. Got the error message "failed to delete file" and found instruction about that. Opened MMC and moved the certificates from Personal to Web Hosting but they still do not appear in List on IIS server.

I have yet to find anything online that provides other alternatives or what I can do to fix this.

Cliff Galiher

What is not immediately evident is whether those certificates shown in your first screenshot were available for server authentication and whether there is a private key in the store for the cert you want to use. Viewing the properties can tell you a ton.

Bill Doherty

ASKER

Hi Cliff and thanks for replying. To answer your question they are enabled for all purposes:

Cliff Galiher

And the private key?

Bill Doherty

ASKER

There is no Private key. Or I can not find one. Comodo only sent the crt file which I installed according to instructions. They just don't show up so that I can bind them.

ASKER CERTIFIED SOLUTION

Cliff Galiher

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Bill Doherty

ASKER

Ah! Because I saved the file from Comodo somewhere other than where the crs.txt file exists is the problem? I have contacted Comodo they are working the reissue now. I will let you know. Thanks

Cliff Galiher

Nothing to do with where you saved the txt file. Generating a CSR also generates a private key. That key is *only* in the certificate store. Not in a text file. Otherwise the certificate would be severely compromised.

Bill Doherty

ASKER

Thank you for your Help. I believe that when I initially sent the request COMODO sent the basic SSL cert and I connected that with the the private key, so when the EV Cert came through there was nothing to bind too. Since then I have received rekey for EV certification and am now able to bind the SLL certificate to the web site.