Re: Odd certificate issue with Companyweb

Hello Bryan,

Thank you for posting back!

Based on my research, CEICW does not support .pfx file, so let's manually
import the .pfx file into Certificate MMC, and export it to .cer file, then
use the .cer file to rerun CEICW. Please see my following general steps:

1. Go to Start -> Run "mmc" (without quotation marks).

2. Click File -> Add/Remove Snap-in -> Standalone tab -> Click Add ->
Select Certificates -> Click Add.

3. In the Certificate snap-in window, select Computer account

4. In the Computer window, select "Local Computer".

5. Finish. Click Close and OK.

6. Expand to Console Root\Certificates\Personal\Certificates.

7. Right click Certificates -> All Tasks -> Import.

8. Run the Certificate Import Wizard.

9. Select the .pfx file and finish rest of the wizard.

10. After the certificate being exported, right click the certificate,
select All Tasks -> Export.

11. Run the Certificate Export Wizard.

12. Select "No, do not export the private key" and finish rest of the
wizard.

13. After the .pfx file being exported to .cer file, rerun CEICW and test
whether it works now.

Please take your time to perform the steps. If anything is unclear, please
let me know. I am looking forward to hearing from you!


Best regards,

Brandy Nee

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
>From: "Bryan L" <blinton.nospam@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <#YPvt1ryFHA.2932@xxxxxxxxxxxxxxxxxxxx>
<9bwZxryyFHA.3772@xxxxxxxxxxxxxxxxxxxxx>
<uEyYaaP0FHA.2008@xxxxxxxxxxxxxxxxxxxx>
<0jbVUDw0FHA.1188@xxxxxxxxxxxxxxxxxxxxx>
>Subject: Re: Odd certificate issue with Companyweb
>Date: Tue, 18 Oct 2005 16:03:58 -0500
>Lines: 132
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2900.2180
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>X-RFC2646: Format=Flowed; Original
>Message-ID: <e1IX2dC1FHA.3756@xxxxxxxxxxxxxxxxxxxx>
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: connellinsurance.com 66.76.216.32
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:162431
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>Brandy,
>
>Thanks for your reply. You understood my question *exactly*.
>
>I understand your instructions, but unfortunately I cannot follow them.
You
>said:
>
>> What you need to do is running the CEICW wizard again and on the "Web
>> Server Certificate" page, choose "Use a Web server certificate from a
>> trusted authority" to import a third party certificate.
>
>When I run the CEICW, it will only accept .cer files for 3rd party
>certificates. However, certificates that *include* the private key are
>exported as .pfx files. If I choose the certificate response from the
>trusted authority (the .cer file), it tells me "No certificate has been
>requested for the default Web site in IIS". But I cannot choose the
>certificate I exported that *includes* the private key because those are
>exported to .pfx files, and .pfx files are not supported by the CEICW.
>
>Thanks,
>
>Bryan
>
>
>
>

.

Relevant Pages

  • Re: Odd certificate issue with Companyweb
    ... but I still can't complete the CEICW. ... using the Certificates snap-in, ... request for a certificate by using the Web Server Certificate Wizard in IIS. ... > Based on my research, CEICW does not support .pfx file, so let's manually ...
    (microsoft.public.windows.server.sbs)
  • Re: EFS experiment - need help
    ... They are the same cert. ... You should never import the PFX file unless you want to do ... You do not import the cer file to create the recovery policy. ... > Rclick, Open Encryption File System certificate, thumbprint is 3a 2b.. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Install SSL Cert - NO KEY Manger in IIS 5
    ... Select Local Computer on the next screen, ... Click next, browse to the PFX file, select Next ... Choose ASSIGN a certificate already on the server...... ... take this server offline and install the the *.KEY file on ...
    (microsoft.public.inetserver.iis.security)
  • Re: Generate/Export PKCS #12 certificate from Win2k3 CA
    ... import/export the issuing CA certificate to the trusted root certificate ... Just clicking a .cer or .pfx file will ... When you export the private key you will need to use a password to protect ... authentication and if your VPN client is l2tp you probably need a "computer" ...
    (microsoft.public.windows.server.security)
  • Windows 2003 CA bug?
    ... I'm encountering a problem attempting to import a key pair to use as ... generate the key pair and certificate" ... Windows created PFX file. ...
    (microsoft.public.security)
Quantcast