Re: Failure installing SSL certificate on SBS2003PremSP1 (incl. ISA200
- From: "Steve Foster [SBS MVP]" <steve.foster@xxxxxxxxxxxxx>
- Date: Tue, 21 Feb 2006 13:13:10 -0800
Alex wrote:
I have spent most of Friday, all Monday and two days previously trying to get
a CA generated SSL cert to import into the ConnectToInternet wizard. It is a
nightmare. All Friday and Monday and two chaps at MS Partnet support (in
India I think) have been trying to help.
Basically I generate the certreq.txt as per CtoI wizard help instructions,
send it off to my CA, I get back a .crt file or a .cer file. This will
Which CA?
manually import into IIS6 but never into the CtoI wizard. I also think that
it is critical to get it working through the SBS wizard and not manually in
the IIS wizard because clearly ISA2004 needs some configuring done as well or
even instead of IIS. Basically I think the SBS web listener needs to be
changed, but if I try, my newly manually imported cert does not appear in the
list of available certs to change to so I am stuck.
If the certificate is properly installed in IIS, it should be available to ISA, since both are working off the same certificate store.
You did complete the IIS certificate request process, right? It knows that the request is pending, and the import should complete that process.
You can also look at the Certificate store directly, by running MMC, and adding the Certificates snap-in pointing it to the Local Computer account. You should find the SBS self-signed certificates, and the IIS imported real certificate under Personal Certificates.
You can also, if necessary, import the certificate directly from this snap-in too.
Could someone definitively say whether the Connect To Internet wizard for
SBS2003PremiumSP1/ISA2004 works properly when importing a .cer file back from
my CA, and what kind of .cer file should I be asking for from my CA? Should I
ask for IIS6 compatible or SBS2003 or ISA2004 or something else?
And if, as I suspect, actually the ConnectToInternet wizard does not
correctly deal with ISA2004, could someone tell me what I do next?
The only change in ISA is to associate the two SBS web listeners to the new external certificate. It's easy enough to do this directly in the ISA Management MMC.
--
Steve Foster [SBS MVP]
---------------------------------------
MVPs do not work for Microsoft. Please reply only to the newsgroups.
.
- Prev by Date: Re: web server certificate - what to put in ?
- Next by Date: Re: Win2k Domain -> SBS2k3 Domain
- Previous by thread: Re: Failure installing SSL certificate on SBS2003PremSP1 (incl. IS
- Next by thread: RE: Distribution List Archives Move
- Index(es):
Relevant Pages
|
