Security

Ask something
Discussion Locked

IIS4.0 with digital cerificates

0 helpful
3 replies

by vikrant.goswami

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi All,
I am trying to implement ceritificates in IIS 4.0 using the steps given in KB: Q218445 and KB:Q255981....this gives only partial soln.
The steps which describe for client "Installing the Key Certificate on the Client" using certificate server doesn't work with IE5.0.
Infact its a bug and can be worked out by updating the browscap.ini file for IE5.01.(pl refer" IIS Monthly Chat - Certificates, Installation and Deployment
Wednesday, January 12, 2000
)
I am lookin for following things:

1)Where is the Root CA stored on the IIS? I mean which folder?

2)After successfully installing Root CA and the key certificate on the server side how do i test them????? I am tryin by enabling the option "Require secure channel when accesing this resource" in the Directory security tab - Secure communication - edit.
Let me know if its right or not????

3)After testing server side certs how to proceed with the client side certs????

4)Certificate server is very poorly documented with very little help....any suggestions would be really appreciated.

Thanx n Regards

3 replies

by sergey kovzik

1. keys aren't stored as simple files. kernel works with LSA module. you can track involved files and registry keys by using some monitor. Very ROOT CA are stored in SCHANNEL.DLL. If you mean keys for Certification Server - there is .mdb database insystems32\certlog\ and also some files in system32\certsrv
2. simple. connect to https://your_server/. You should see in browser lock icon, double click on it
3. same way - you need to generate keys and install them into browsers. then during SSL connection browser will send his key and you can analyze this data in scripts.
4. hmm... actualy there is not much to document in it. have you checked documentaion from NT Option Pack? It has concepts and administration guide in 100 html-files.
There is also a little on MSKB.
support.microsoft.com/support/kb/articles/Q184/6/95.ASP
support.microsoft.com/support/kb/articles/Q216/9/22.ASP
support.microsoft.com/support/kb/articles/Q185/1/95.ASP
support.microsoft.com/support/kb/articles/Q235/9/64.ASP
One thing - don't forget to renew certificates :)

This discussion is closed to new replies.