Re: how to make https
From: Manoj Menon (it.ees_at_ltees.com)
Date: 09/21/04
- Next message: Manoj Menon: "Re: how to make https"
- Previous message: Jeff Cochran: "Re: Wireless Security"
- In reply to: Miha Pihler: "Re: how to make https"
- Next in thread: Manoj Menon: "Re: how to make https"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 21 Sep 2004 02:42:18 -0700
Hi Miha
Sorry for replying so late. I was out for weekend and came today. As
suggested by you i went through this document:
How To Set Up SSL Using IIS 5.0 and Certificate Server 2.0
http://support.microsoft.com/default.aspx?scid=kb;en-us;299525&Product=iis50
But I am facing some problem. As mentioned in this article, first I
made a certificate request. Here I gave netbios name of the server as
the common name.
Then I installed the certificate componnent from the add/remove
component.
Then I went ahead for 'processing certificate request'. Here after
Issuing the Pending Requests, when I do Check on pending request it
says "You have no pending certificate requests." Then I select
"Retrieve the CA certificate or certificate revocation list" and save
the certificate file on to my desktop. Then I proceed to install
this certificate on my web page. I go to IIS MMC , properties web
page-Directory security-SErver Certificate and click "Process the
pending request and install the certificate" and give the path of the
file on my desktop but it says "Selected certificate was already
installed to another server."
I fail to understand what does this error mean? Can you please tell me
how to go ahead with this certification?
Thanks Manoj
"Miha Pihler" <mihap-news@atlantis.si> wrote in message news:<u7sXdnInEHA.1672@TK2MSFTNGP09.phx.gbl>...
> Hi Manoj,
>
> Yes, 3rd party certificates are payable. Prices range from about 150$ per
> year and more.
>
> CA server doesn't come with IIS (well it did in NT). Now it comes with
> either Windows 2000 or Windows 2003.
>
> Document will work for internal and external use. The reason I ask is none
> of external users (e.g. your customers) will not trust your internal
> certificates by default. If primary use is external (again I have your
> customers in mind) I usually recommend obtaining certificate from 3rd party
> trusted certificate authority. Among other this kind of solution is more
> professional towards the customer.
>
> If you decide and setup your own CA my recommendation is to use Windows 2003
> CA. Here are some additional resources you might want to use before you
> setup your CA server.
>
> Managing a Windows Server 2003 Public Key Infrastructure
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/mngpki.mspx
>
> Windows Server 2003 PKI Operations Guide
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx
>
> PKI Enhancements in Windows XP Professional and Windows Server 2003
> http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx
>
> Best Practices for Implementing a Microsoft Windows Server2003 Public Key
> Infrastructure
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
>
> Feel free to post back with any addition questions you might have.
>
> Mike
>
> "Manoj Menon" <it.ees@ltees.com> wrote in message
> news:1a7bbeae.0409162232.541c7511@posting.google.com...
> > Thanks Miha for your reply.
> > Well regarding the CA server, what do you recommend? I think 3rd
> > party Certificate Agency will be payable. So I think first I will go
> > for the free one...the Microsoft CA which is available free with IIS.
> > Is that OK??
> >
> > I want my site to be used in both way, through the web address(on
> > Internet) and the local IP(in Intranet or WAN). Will this document
> > work for both of them??
> >
> > Iam going through "How To Set Up SSL Using IIS 5.0 and Certificate
> > Server 2.0" and will get back to you soon.
> >
> > Thanks
> > Manoj
- Next message: Manoj Menon: "Re: how to make https"
- Previous message: Jeff Cochran: "Re: Wireless Security"
- In reply to: Miha Pihler: "Re: how to make https"
- Next in thread: Manoj Menon: "Re: how to make https"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|