Re: Generate SSL certificate request from ISA server

From: Mark Renoden [MSFT] (markreno_at_online.microsoft.com)
Date: 03/09/05


Date: Wed, 9 Mar 2005 14:08:49 +1100

Hi Daniel

You'd usually generate the request from the web server you're publishing and
when you receive the certificate from the authority, install it on the ISA
Server instead of the web server.

HTH

-- 
Mark Renoden [MSFT]
Windows Platform Support Team
Email: markreno@online.microsoft.com
Please note you'll need to strip ".online" from my email address to email 
me; I'll post a response back to the group.
This posting is provided "AS IS" with no warranties, and confers no rights.
"Daniel Peterson" <pythas@hotmail.com> wrote in message 
news:%23%23RxY9EJFHA.2852@TK2MSFTNGP09.phx.gbl...
> The commercial certificate authorities want me to generate the certificate 
> request to send to them, which doesn't appear to be possible directly from 
> the ISA server.  I'm not using Microsoft's CA product.
>
> I guess what I'm asking is this:
>
> Can ISA generate an SSL certificate request directly (which the CA I'm 
> dealing with requires), or do I need to generate them from a different 
> machine and export/import the certicates??
>
> "Mark Renoden [MSFT]" <markreno@online.microsoft.com> wrote in message 
> news:OljYtt4IFHA.1304@TK2MSFTNGP09.phx.gbl...
>> Hi Daniel
>>
>> I'm not completely clear which server you're suggesting you install IIS 
>> on.
>>
>> If you're talking about a Certificate Authority that you manage and it 
>> has the IIS bits installed on it, you can browse to the /certsrv virtual 
>> directory on that CA server and request a web server certificate directly 
>> from a web browser on the ISA Server.
>>
>> External certificate authorities such as Thwart have their own mechanisms 
>> for certificate requests.
>>
>> Does that help?
>>
>> Kind regards
>> -- 
>> Mark Renoden [MSFT]
>> Windows Platform Support Team
>> Email: markreno@online.microsoft.com
>>
>> Please note you'll need to strip ".online" from my email address to email 
>> me; I'll post a response back to the group.
>>
>> This posting is provided "AS IS" with no warranties, and confers no 
>> rights.
>>
>>
>>
>> "Daniel Peterson" <pythas@hotmail.com> wrote in message 
>> news:uR5Qhu0IFHA.2640@TK2MSFTNGP09.phx.gbl...
>>> Hello,
>>>
>>> Is there not a way to generate a SSL certificate request from the ISA 
>>> server, without any other software installed?
>>>
>>> I'm trying to get a commercial SSL cert, and don't see any way to 
>>> generate the request without installing IIS (which seems like a TERRIBLE 
>>> idea).
>>>
>>
>>
>
> 


Relevant Pages

  • Re: SharePoint 3.0: problems with external access
    ... Here are the steps to publish a WSS 3.0 application behind ISA Server. ... Let's assume that you created a new WSS 3.0 application, that listens to port 80, and the host header is 'Intranet'. ... Go to IIS Manager and make sure that the IP address of the site is set to the IP address of the server. ... Run the wizard to create a new SSL certificate for the site. ...
    (microsoft.public.windows.server.sbs)
  • Re: SharePoint 3.0: problems with external access
    ... In one of the tabs of the publishing rule there is an option to set that the requests come from the client and not from the ISA computer. ... Do you have an email address you can post for me to send you some screen shots of my ISA rule and Web Certificate for you to look at. ... When it comes down to selecting the Web Listener, create a new one, using the certificate you just created at port 8889. ... Click on delete pending request and then start the wizard again. ...
    (microsoft.public.windows.server.sbs)
  • Re: Configuring SBS2003 for OWA and RWW
    ... And make sure certificate will not be ... On the Connection Type page, click Broadband, and then click Next. ... next to Preferred DNS server and next to ... If you are using ISA, please go to ISA management console, and navigate ...
    (microsoft.public.windows.server.sbs)
  • Re: OWA Form Resetting
    ... It seems that I had FBA turned on on both the ISA & Exchange server. ... I was issued a new SSL certificate from InstantSSL.com. ... After installing the new cert and REBOOTING, ...
    (microsoft.public.isa)
  • Re: OWA Form Resetting
    ... It seems that I had FBA turned on on both the ISA & Exchange server. ... the ISA OWA Listener to Integrated Authentication and the FBA set on ... I was issued a new SSL certificate from InstantSSL.com. ...
    (microsoft.public.isa)