Security

Ask something
Discussion Locked

Certificate Authority Help

0 helpful
7 replies

by steveg

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am trying to use SSL and 128 bit encryption on a small sub web to a web site I manage. I heard that there was a way to use a Certificate created on my own server instead of purchasing the service of a 3rd party Certificate Authority Company. Cananyone help and lead me in the right direction??
I have created a root CA and have attempted to use it but as soon as I invoke SSL and 128 bit encryption on the sub web, the web pages cannot be found using a browser on the web.(IE 6.0).
Thanks!!

7 replies

by delightful deb

This will help you install the Certificate. Let me know how you get on.
1)Log on as an Enterprise Administrator.
2)Open Control Panel, Add/
Remove Programs.
3)Click Add/Remove Windows Components
4)Click the Components Button
5)Click the box next to Certificate Services
6)Click Yes when reminded that you cannot change the computer name after the installation of Certificate Services.
7)Click Next
8)Select Enterprise Root CA
9)Click Advanced Options to note the cryptographic service providers and the settings to be used in generating key pairs. Accept the defaults and click Next
10)Enter Identifying Information, CA Name, Country/Region, and Valid for are required.
11)Click Next
12)In the Data Storage Location dialogue box, you can specify the location for databases and logs or accept the default. In this case, accept the default.
13)Click Next
14)If asked whether it is okay to stop IIS Services, Click OK.
15)Insert the Windows 2000 Server (or Advanced Server) CD-ROM when asked or point to another location for the installation files.
16)Click Finish

Cheers

Debbie

by beermonster

Hi,
Feel free to flame me if I'm wrong, but you are remembering to use https rather than http when navigating to the site?

by colin

Once you have set up the certificat server you can go to your IIS server and make it generate a certificate request file.

You then browse to the stand alone certificate server using its web interface and request a certificate using the file generated by IIS. Go to the certificate manager, grant the request and then download your new certificate from the web page and install it on the IIS server.

Make sure you use the web servers correct domain name when requesting the certificate.

This discussion is closed to new replies.