Re: Key Manager Mystery

From: Bernard (qbernard_at_hotmail.com)
Date: 07/25/03


Date: Fri, 25 Jul 2003 10:50:20 +0800


what do you mean by

" When I back it up and restore it on another server, it doesn't match
 the cert that is served to the clients."

how many cert you have ?
is this cert ? -> joeswidgets.com ??

your url must match the common name of the cert.
if not, you will get a system prompt telling you that cert is
invalid....

-- 
Regards,
Bernard Cheah
http://support.microsoft.com/
Please respond to newsgroups only ...
"perlguy" <perlguy2@c-cs.com> wrote in message
news:608014f7.0307241104.f8c991e@posting.google.com...
> Thanks.
>
> I am sure that I am looking at the right server.
>
> When I back it up and restore it on another server, it doesn't match
> the cert that is served to the clients.
>
> I don't want to restore to the original server, because I don't want
> to lose the cert.
>
> I am positive that I'm looking at the right server.
> "Bernard" <qbernard@hotmail.com> wrote in message
news:<ubfOLnAUDHA.2188@TK2MSFTNGP10.phx.gbl>...
> > Are you sure you accesing the correct server?
> > Have you try backup the correct cert key and
> > remove all and reload the key ?
> >
> >
> > -- 
> > Regards,
> > Bernard Cheah
> > http://support.microsoft.com/
> > Please respond to newsgroups only ...
> >
> >
> > "perlguy" <perlguy2@c-cs.com> wrote in message
> > news:608014f7.0307211247.47400ece@posting.google.com...
> > > We have the following mystery on our IIS4.0/NT server. In the key
> > > manager we see only one certificate for joeswidgets.com. However when
> > > we access SSL from a browser we see a different certificate for
> > > joes.com( all names fictitious).
> > >
> > > We are moving to a new server, and only need the joes.com certificate.
> > > The joeswidgets.com certificate is an  old one which we aren't
> > > interested in using any more.
> > > The question is where does IIS take the certificate that it's sending
> > > the client?
> > >
> > > Your help would be greatly appreciated.
> > >
> > > Sol


Relevant Pages

  • Re: Web Certificate for IIS Server on SBS Domain
    ... Before your reply, I actually ran across rapidssl myself, and have ordered and installed the free 30-day certificate on my site. ... I explained what you'd told me about putting my existing configuration at risk by installing Cert Services, and he said he didn't know that. ... Again, if you're just needing a cert to install on your web server to provide SSL connectivity for remote users, go with an external third-party provider. ... When you add Certificate Services on an internal network, lots of internal communications will start using pieces provided by the Cert Server instead of the defaults from Server 2003, and when things blow up, they can blow up gloriously. ...
    (microsoft.public.windows.server.sbs)
  • Re: Terminal Services over a VPN
    ... Create a certificate request and submit it to godaddy in order to obtain a public cert. ... You can use the wizard in IIS Manager for this by creating a new website that matches the above name (on your TS server), right-click and choose properties, directory security tab, server certificate button. ... After the install you can stop or delete the website created above since you don't need it for anything. ...
    (microsoft.public.windows.terminal_services)
  • Re: SBS 2003 Premium and Cert Services
    ... that philosphy got blown out of the equation when SBS included Exchange OWA ... "Small Business Server" which is MS claim as to why the risk of exposing the ... the Certificate Server on another server, ... >> Cert, or you could edit the properties of your Certification Authority to ...
    (microsoft.public.windows.server.sbs)
  • Re: Web Certificate for IIS Server on SBS Domain
    ... and installed the free 30-day certificate on my site. ... instructions to install Certificate Services. ... If I can find a way to issue my own cert without risking my SBS setup, ... > Server instead of the defaults from Server 2003, and when things blow up, ...
    (microsoft.public.windows.server.sbs)
  • Re: Cant disable "Trusted" for Certificates Issued by MS Certificate Server
    ... The certificate for the root CA (the one that is being used by the MS ... Certificate Server) was created when I installed MS Certificate Server. ... The next day, when I got the server cert back from the 3rd-party CA, I ...
    (microsoft.public.inetserver.iis.security)