Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have our Windows 2003 server configured as a Certificate Authority for our intranet. The CA itself is certified as, say,

We would like to generate further, intranet, certificates from this for individual web applications.

We do not want to self-sign, this is for pre-production testing and are looking to mirror the target deployment as closely as possible.

We have tried this and can't get the certificate to provide either Server or Web server identity. It only provides EFS support.

This means the web browser doesn't accept it.

How can we do this? We are using IIS6 on Windows 2003 Small Business Server.

share|improve this question
What type of CA is it? Stanalone/Enterprise? – Zoredache Jan 24 '11 at 16:08
Thanks Zoredache. It's a Standalone, it's Small Business Server – Program.X Jan 24 '11 at 16:23
up vote 0 down vote accepted

Solved it.

We were going wrong by putting the wrong name as the name of the certificate (bit unclear, but this is essentially the web address that is being certificated).

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.