Re: Installing an existing GoDaddy SSL on another SBS box....

Costas <cpstechgroup@xxxxxxxxx> wrote:
The problem is that the certificate doesn't exist in the certificate
store.

Right. I had thought (assumed incorrectly) that the processes I was trying,
would *put* it there. ...


Run MMC and add the 'Certificates' snap-in for the 'Computer Account'.
Expand the 'Certificates' node, then 'Personal' and then
'Certificates'. Right-click, select 'All Tasks', and 'Import'. Import
the .crt file

Ah....I hadn't done that.

Go to the web site in IIS Manager, 'Directory Security' tab, 'Server
Certificate' and then 'Assign an existing certificate'. Find the
godaddy certificate from the list.

See if that will do it.

I will - thanks, Costas.




"Lanwench [MVP - Exchange]"
<lanwench@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:%23Pai6ugtIHA.3804@xxxxxxxxxxxxxxxxxxxxxxx
This is probably a dumb question; I'm pretty much an IIS moron. But
I've got a functional GoDaddy SSL cert installed and working on my
own SBS box...and I'm now moving that server to new hardware (well,
technically, I'm rebuilding it in a virtual server). It's a pretty
vanilla install so far. When I first ran the CEICW I just entered a
bogus / placeholder self-signed SSL cert - I now want to replace it
with my real one so it's ready to go when I do my cutover.

I installed the intermediate certificate properly, and then re-ran
the CEICW to install the main cert, thinking that would simply work,
silly me! I got an error that there was no pending request for the
default website (there wasn't, of course) so I prepared one. I did
this by following the "official SBS Blog" instructions, which are
what I'd followed to order the cert in the first place - I created a
new website using the appropriate host.domain.com name & got the
certreq.txt generated. The CEICW still wouldn't let me install the
existing CRT file - same
error.

I then tried removing the existing request from host.domain.com and
running the same request on the *default* website. Same error; no
dice. Abandoning the CEICW, I ran through the SBS blog instructions again
&
recreated host.domain.com and prepared a new request. Then tried to
go through & assign the .crt file. That yielded "The pending request
for this response file was not found. This request my be canceled.
You cannot install selected response certificate using this Wizard"

I tried copying the certreq.txt from my existing server to the new
one to see if that made any difference - no dice.

When I've gotten third party certs before I've always created the
certreq.txt file on the server & run through it with the SSL cert
provider at ordering time - it's always worked fine that way.
However, I've never done anything like this after I've already *got*
a valid certificate and want to install it on a new box.

Q1: Do I have to go back to GoDaddy to get a new one issued for
download, just as though I'd never done this before?
Q2: Will that do anything bad to my existing, working SSL cert on the
as-of-yet production server?

I haven't run into this at a client site yet, but I'm sure it can
and will happen, and I'd like to know what the proper procedures are
so I don't show them what an IIS moron I am. Help!



.

Relevant Pages

  • Re: Change public domain name for E-mail and Web on SBS2003
    ... self-cert from everything while the request was being processed. ... I need to change the e-mail addresses, and the SSL certificate to match ... just run the Connect to the Internet Wizard ... request and install the new SSL Cert? ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Update repeats
    ... You cannot install some updates or programs ... to a Windows component, install a service pack for Windows or for a Windows ... The Microsoft digital signature affirms that software has been tested with ... Publishers certificate store. ...
    (microsoft.public.windowsupdate)
  • RE: 3rd Party Certificate Pending Request not found
    ... This request may be canceled. ... After much trial and tribulation the 3rd party GoDaddy certificate started ... You are attempting to install a certificate that does not match the private ... If you have a backup of the private key, you can install the certificate via ...
    (microsoft.public.windows.server.sbs)
  • Re: Unable to install Godaddy cert on SBS R2 Standard box
    ... When you receive the file from Godaddy it is in a .crt file and Windows is looking for a .cer. ... "Please create a new request,and request for a new certificate from ... Godaddy(issue a new certificate),then install the new certificate. ...
    (microsoft.public.windows.server.sbs)
  • Re: Installing an existing GoDaddy SSL on another SBS box....
    ... Certificate' and then 'Assign an existing certificate'. ... I've got a functional GoDaddy SSL cert installed and working on my ... vanilla install so far. ... I got an error that there was no pending request for the ...
    (microsoft.public.windows.server.sbs)
Loading