RE: Certificate Transfer



In response to: "Can a SSL certificate be transferred from a Win2k3 IIS box
to Win2k8 IIS?"

As long as you have the private key in an exportable format (or the original
PFX file with password) then, yes, getting a certificate transferred to
another operating system (Windows 2008, Unix, OS X, etc) shouldn't be a
problem.

Assuming you're referring to an SSL certificate for a site: once you process
a certificate request, IIS generates a public and private key pair and stores
them in your machine's certificate store. By default, this is marked as
exportable and doesn't include a password. At that point, you can export the
pair, import it on another machine and then wire it up to an IIS site.

In Windows 2003 with IIS 6.0 you export the certificate using the
Certificates MMC Snap-In (connect to "My Computer"; it'll be located under
"Personal"). In Windows 2008 with IIS 7.0 you can import the certificate
using the "Server Certificates" feature of the server. Once that's done, you
can associate it using bindings for the particular site.

Hope this helps,
Tyrven


.



Relevant Pages

  • RE: ssl certificate error on public folders
    ... "Finish" to remove the certificate. ... Restart the IIS Admin service in the services mmc. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • RE: ssl certificate error on public folders
    ... "Finish" to remove the certificate. ... Restart the IIS Admin service in the services mmc. ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: X.509 Certificate based authentication
    ... certificate with a duplicate name, but I suppose it could happen. ... alternative name) is the only thing you get from the cert that gives you any ... identity information about "who" owns the private key for the cert's public ... Does IIS map the public key to a windows ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: security header is not present in the incoming message
    ... Similar problem appears when I run my client directly under IIS instead of under ASP.NET Development Server. ... There are no certificates in the certificate store that match the find value of 'CN=WSE2QuickStartServer'. ... 'Hello World with certificate policy. ...
    (microsoft.public.dotnet.security)
  • Re: Problems setting up SSL on Exchange 2003 Front End server
    ... No it doesn't look like there is anything under IIS Manager about CertSrv, ... It was installed in preperation for the Exchange FE server. ... My certificate knoweldge is fairly minimal. ...
    (microsoft.public.exchange.admin)

Quantcast