Re: how hard can it be?

no, both ISA and IIS need 'a cert'. You cannot have SSL enabled in IIS
without a cert.

I don't actually have an ISA to conveniently look at at the moment but the
settings can be changed in relation to cert handling.

Normally, the IIS default site will have the domain.local cert and this is
also fed into the ISA publishing rule. When a user connects from outside to
a website behind ISA it is offered the cert defined in the publishing rule.
The publishing rule then connects to the published site and _MAY_ use a
different cert than that between the external browser and the publishing
rule.

I'm sorry that I can not, at the moment, give you more.

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:%23VaS8hyTJHA.5376@xxxxxxxxxxxxxxxxxxxxxxx
I don't have any SBS servers running a 3rd party cert, but my understanding
is that it only should be imported into ISA, not IIS.

Third Party Certificates and Treo 650 Setup
http://jeffdempsey.wordpress.com/2006/09/12/third-party-certificates-and-treo-650-setup/

--
Merv Porter [SBS-MVP]
============================

"Dieter Visser" <dieter@xxxxxxxxx> wrote in message
news:Oq3t%239wTJHA.5268@xxxxxxxxxxxxxxxxxxxxxxx
Hello Merv,

Am I correct that IIS OR ISA should have a certificate and not both. So I
should delete the one in IIS?

Just to be sure with this confusing stuff.

Thanks for your patience.

Regards
Dieter

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:OSKMBpvTJHA.588@xxxxxxxxxxxxxxxxxxxxxxx
Anything helpful here?

So how does one set up a Godaddy cert in ISA
http://msmvps.com/blogs/bradley/archive/2008/10/16/so-how-does-one-set-up-a-godaddy-cert-in-isa.aspx

Subject: Problem with SSL Certificate following a reinstall of ISA 2004
http://www.smallbizserver.net/Forums/tabid/53/forumid/26/tpage/1/view/topic/postid/92414/Default.aspx#92414

--
Merv Porter [SBS-MVP]
============================

"Dieter Visser" <dieter@xxxxxxxxx> wrote in message
news:OGtYNquTJHA.5200@xxxxxxxxxxxxxxxxxxxxxxx
Hello Merv,

The article you send - thank you for that - was intended for servers
without ISA, and 'we' are working on a follow-up that will cover moving
the certificate to ISA.

I found an article Exporting your SSL Certificate from IIS and
Importing
to ISA server 2004.

I followed all the instructions exported a .pfx file and imported it in
the personal certificate store. And then
the articles states: Now that you have the certificate imported in the
local certificate store of your ISA Server, you can use that
certificate
when publishing a web site or mail server.

Then I try use WEICW to use the certificate for RWW and it keeps coming
up with the msg that don't have a certificate in IIS.

Of course I'm doing something wrong, but I haven't got a clue.

Regards
Dieter Visser

"Merv Porter [SBS-MVP]" <mwport@xxxxxxxxxxxxxxxxxxx> wrote in message
news:edzkt9kTJHA.5812@xxxxxxxxxxxxxxxxxxxxxxx
Any help here Dieter?

How to Install a Public 3rd Party SSL Certificate on IIS on SBS 2003
http://blogs.technet.com/sbs/archive/2007/08/21/how-to-install-a-public-3rd-party-ssl-certificate-on-iis-on-sbs-2003.aspx

--
Merv Porter [SBS-MVP]
============================

"Dieter Visser" <dieter@xxxxxxxxx> wrote in message
news:%23DUL0okTJHA.4680@xxxxxxxxxxxxxxxxxxxxxxx
Hello,

I'm still making a mess of things.

I made a request for a SSL certificate from Godaddy. Used IIS to make
a CSR file.
After I got the certificate I installed it using article 228836:
installing a new certificate

I tried to run CEICW, enable firewall and click use a web server
certificate from a trusted authority, then I browse to the cert file
and open it. After clicking next I get the message I didn't make a
request and there's no certificate in IIS.

Looking in IIS, default website - remote, the certificate is there.

I'm must be missing something here, but what?

Please give me a hint, maybe two?

Regards
Dieter Visser















.

Relevant Pages

  • RE: Getting rid of a rogue SSl certificate
    ... ISA said it would restart the ISA server ... The bogus certificate is still there, like an orphan crying for its mother. ... "Paul Campanale" wrote: ... > server certificate...", it should default to the cert. ...
    (microsoft.public.windows.server.sbs)
  • Re: how hard can it be?
    ... Am I correct that IIS OR ISA should have a certificate and not both. ... to ISA server 2004. ...
    (microsoft.public.windows.server.sbs)
  • Trusted CA question
    ... I'm new to this certificate game so bear with me here: ... IIS box and named it 'www'. ... certificate services on the IIS box (at which point it issued it's own 'root ... CA' cert to itself, or so I've managed to ascertain) and then browsed to my ...
    (microsoft.public.win2000.security)
  • RE: netsh error - 1312
    ... I can issue a cert from the certsrv and make it work but ONLY if I log in as ... "there is no particular SSL certificate that can only be used ... IIS wizard provide a very convenient GUI for us to generate request. ...
    (microsoft.public.dotnet.framework.webservices)
  • Re: OWA Form Resetting
    ... It seems that I had FBA turned on on both the ISA & Exchange server. ... I was issued a new SSL certificate from InstantSSL.com. ... After installing the new cert and REBOOTING, ...
    (microsoft.public.isa)