Re: how to make https

From: Manoj Menon (it.ees_at_ltees.com)
Date: 09/21/04


Date: 21 Sep 2004 02:42:18 -0700

Hi Miha
Sorry for replying so late. I was out for weekend and came today. As
suggested by you i went through this document:
How To Set Up SSL Using IIS 5.0 and Certificate Server 2.0
http://support.microsoft.com/default.aspx?scid=kb;en-us;299525&Product=iis50

But I am facing some problem. As mentioned in this article, first I
made a certificate request. Here I gave netbios name of the server as
the common name.

Then I installed the certificate componnent from the add/remove
component.

Then I went ahead for 'processing certificate request'. Here after
Issuing the Pending Requests, when I do Check on pending request it
says "You have no pending certificate requests." Then I select
"Retrieve the CA certificate or certificate revocation list" and save
the certificate file on to my desktop. Then I proceed to install
this certificate on my web page. I go to IIS MMC , properties web
page-Directory security-SErver Certificate and click "Process the
pending request and install the certificate" and give the path of the
file on my desktop but it says "Selected certificate was already
installed to another server."

I fail to understand what does this error mean? Can you please tell me
how to go ahead with this certification?

Thanks Manoj

"Miha Pihler" <mihap-news@atlantis.si> wrote in message news:<u7sXdnInEHA.1672@TK2MSFTNGP09.phx.gbl>...
> Hi Manoj,
>
> Yes, 3rd party certificates are payable. Prices range from about 150$ per
> year and more.
>
> CA server doesn't come with IIS (well it did in NT). Now it comes with
> either Windows 2000 or Windows 2003.
>
> Document will work for internal and external use. The reason I ask is none
> of external users (e.g. your customers) will not trust your internal
> certificates by default. If primary use is external (again I have your
> customers in mind) I usually recommend obtaining certificate from 3rd party
> trusted certificate authority. Among other this kind of solution is more
> professional towards the customer.
>
> If you decide and setup your own CA my recommendation is to use Windows 2003
> CA. Here are some additional resources you might want to use before you
> setup your CA server.
>
> Managing a Windows Server 2003 Public Key Infrastructure
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/mngpki.mspx
>
> Windows Server 2003 PKI Operations Guide
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws03pkog.mspx
>
> PKI Enhancements in Windows XP Professional and Windows Server 2003
> http://www.microsoft.com/technet/prodtechnol/winxppro/plan/pkienh.mspx
>
> Best Practices for Implementing a Microsoft Windows Server2003 Public Key
> Infrastructure
> http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
>
> Feel free to post back with any addition questions you might have.
>
> Mike
>
> "Manoj Menon" <it.ees@ltees.com> wrote in message
> news:1a7bbeae.0409162232.541c7511@posting.google.com...
> > Thanks Miha for your reply.
> > Well regarding the CA server, what do you recommend? I think 3rd
> > party Certificate Agency will be payable. So I think first I will go
> > for the free one...the Microsoft CA which is available free with IIS.
> > Is that OK??
> >
> > I want my site to be used in both way, through the web address(on
> > Internet) and the local IP(in Intranet or WAN). Will this document
> > work for both of them??
> >
> > Iam going through "How To Set Up SSL Using IIS 5.0 and Certificate
> > Server 2.0" and will get back to you soon.
> >
> > Thanks
> > Manoj



Relevant Pages

  • RPC over HTTP, Microsoft solution
    ... Exchange Server 2003 RPC over HTTP Deployment Scenarios ... Place a check in the box next to 'Certificate Services' and click 'Yes' ...
    (microsoft.public.exchange.setup)
  • Re: OWA 2003 w/ Smart Card Authentication.
    ... Exchange 2003 server via ActivSync. ... the IIS certificate. ... Whether or not authentication will succeed is completely dictated by ... Server's SSL certificate must be configured on root of v-server via ...
    (microsoft.public.exchange.connectivity)
  • Re: Certificate Templates - Duplicating template - Issue does not work
    ... Enterprise Edition if you need to modify your certificate templates. ... Implementing and Administering Certificate Templates in Windows Server 2003 ...
    (microsoft.public.win2000.security)
  • Re: Configuring LDAP on Entourage 2004 OS X
    ... Microsoft CSS Online Newsgroup Support ... does not work with a self signed SSL certificate OR with the SSL ... configure the System to allow OMA and "Server ActiveSync" access from the ... Configuring Exchange Server 2003 for Client Access. ...
    (microsoft.public.windows.server.sbs)
  • Re: Configuring SBS2003 for OWA and RWW
    ... And make sure certificate will not be ... On the Connection Type page, click Broadband, and then click Next. ... next to Preferred DNS server and next to ... If you are using ISA, please go to ISA management console, and navigate ...
    (microsoft.public.windows.server.sbs)