Re: Server certificate - CSR generation



If you want to use the wizards in IIS, then you can create a temporary website in IIS, generate an appropriate cert request, submit it, receive the certificate, install it. Then later on, use this cert on your production site: http://support.microsoft.com/kb/295281

Alternatively, you can always generate a cert request using certreq.exe, and submit this manually to get a certificate. Import this into the local computer's Machine cert store, and then you can change IIS config to use this new certificate.

Cheers
Ken

"E. Kwong" <ekwong999AThotmail.com> wrote in message news:urTfuZlfIHA.4880@xxxxxxxxxxxxxxxxxxxxxxx
Currently we have a cert in place for our web server (Win 2003 IIS 6). But about a month from now we are going to change our web address / URL.

Is it possible to generate a CSR for the new URL and submit to the CA in advance? My impression is that the current cert has to be removed first before a new CSR can be generated. If that's the case, we'll have to wait close to the cut over date.

Any insight appreciated.




.



Relevant Pages

  • Re: how hard can it be?
    ... both ISA and IIS need 'a cert'. ... You cannot have SSL enabled in IIS ... I don't actually have an ISA to conveniently look at at the moment but the ... Am I correct that IIS OR ISA should have a certificate and not both. ...
    (microsoft.public.windows.server.sbs)
  • Trusted CA question
    ... I'm new to this certificate game so bear with me here: ... IIS box and named it 'www'. ... certificate services on the IIS box (at which point it issued it's own 'root ... CA' cert to itself, or so I've managed to ascertain) and then browsed to my ...
    (microsoft.public.win2000.security)
  • RE: netsh error - 1312
    ... I can issue a cert from the certsrv and make it work but ONLY if I log in as ... "there is no particular SSL certificate that can only be used ... IIS wizard provide a very convenient GUI for us to generate request. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: SSL Certificate Cached?
    ... Have you try to remove the cert from IIS MMC? ... Try remove all certs then import the new cert using this method. ... How to Import a Server Certificate for Use in Internet Information Services ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 5.1 SSL Cetificate Missing
    ... To view certs that IIS can use you need to manually run MMC, add the Certificates snapin, point it to the Machine account, and then look in the Personal Certificate Store. ... If you want a certificate from that CA, then there's no need to join a domain and auto-enroll. ... Run through the wizard in IIS to create a certificate request file, or generate your own using certreq.exe. ... After issueing your cert, install it onto the IIS website on your XP box. ...
    (microsoft.public.inetserver.iis.security)