Re: IIS 5.0 & SSL

From: BB (Bernard_at_3exp.com)
Date: 03/29/03 

From: "BB" <Bernard_at_3exp.com>
Date: Sat, 29 Mar 2003 11:14:31 +0800

I would suggest you export the cert out (with private key)
then reimport again, or import to other machine, and export
from there and import back to this machine.

is the cert working now ? if you use https ?
here's a kb on how to ...
HOW TO: Enable Schannel Logging
http://support.microsoft.com/?id=260729

Kb on import and export cert
How to Import a Server Certificate for Use in Internet Information Services
5.0
http://support.microsoft.com/?id=232137

HOW TO: Back Up a Server Certificate in Internet Information Services 5.0
http://support.microsoft.com/?id=232136

Regards,
Bernard Cheah
http://support.microsoft.com/

"Trevor Wat" <ccwat@hotmail.com> wrote in message
news:05b201c2f574$2ea03d20$3301280a@phx.gbl...
> My client set up a web site at DMZ of their firewall.
> People from outside only able to hit their site with http
> but not https.
> When I look at the system log of the web server's event
> viewer, there is an error (Schannel)and the Event ID:36870
> and description:
>
> A fatal error occurred when attempting to access the SSL
> server credential private key. The error code returned
> from the cryptographic module is 0x80090016.
>
> P.S. I check the firewall, the port 443 is open and just
> like the other ports 80(http) and 20,21 for their ftp site
> which also running on the same server.
> They applied the digital certificate from Verisign and
> installed on the Web server with no error. They rename the
> Default Web site to other name but it was done long before
> they applied the certificate. Any idea.
>
> Thanks

Relevant Pages

  • Re: ssl question
    ... you have some problem with the cert itself. ... The Web site might be experiencing technical> difficulties, or you may need to adjust your browser settings....Cannot> find server or DNS error" ... Determine If SSL Connectivity Is Not Working on ... It says to> attach assign the certificate to the default web site, ...
    (microsoft.public.inetserver.iis.security)
  • Re: PEAP not working with server certificate from Globalsign
    ... Are you aware of cert provider supporting that EKU? ... > Your setup isn't clear -- you say you're using a Cisco RADIUS server? ... > cert must have the server authentication purpose in order for it to work ... >> A customer has ordered a server certificate from Globalsign to use on ...
    (microsoft.public.internet.radius)
  • Re: HTTPS !
    ... Are you sure that you applied the cert to the Default Web site? ... Typically, when you install a cert on the OWA server, you go into IIS ...
    (microsoft.public.exchange.admin)
  • OWA & IIS Cert Question
    ... I'm planning to put up a Front-End Exchange 2003 server to compliment my ... We currently do not have a cert on our existing server. ... Web Site or at the same level as Default Web Site? ...
    (microsoft.public.exchange.admin)
  • Re: Certificate Question
    ... If your cert is for the web site name, not the server name, you can export ... > I'm about to migrate a Verisign certificate from our existing Ex2k OWA ...
    (microsoft.public.inetserver.iis.security)