Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have our Windows 2003 server configured as a Certificate Authority for our intranet. The CA itself is certified as, say, mail.externaldomain.com.

We would like to generate further, intranet, certificates from this for individual web applications.

We do not want to self-sign, this is for pre-production testing and are looking to mirror the target deployment as closely as possible.

We have tried this and can't get the certificate to provide either Server or Web server identity. It only provides EFS support.

This means the web browser doesn't accept it.

How can we do this? We are using IIS6 on Windows 2003 Small Business Server.

share|improve this question
    
What type of CA is it? Stanalone/Enterprise? –  Zoredache Jan 24 '11 at 16:08
    
Thanks Zoredache. It's a Standalone, it's Small Business Server –  Program.X Jan 24 '11 at 16:23
add comment

1 Answer

up vote 0 down vote accepted

Solved it.

We were going wrong by putting the wrong name as the name of the certificate (bit unclear, but this is essentially the web address that is being certificated).

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.