Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

My main server is running IIS 7 and has an ASP.NET/C# website that needs communicate to another server that uses Oracle Application Server.

Currently, the website is communicating to the Oracle Applicatoin Server using HTTP. I would like to setup the SSL certificate so that I can access the Oracle Application Server via HTTPS from the website.

Do I just need to create the self signed certificate on IIS 7 then export it and set it up on the Oracle Application Server?

share|improve this question
Do you also need external access to this application running on this application server. Or is it only for internal use? – Guido van Brakel Mar 10 '11 at 17:59
Just need access between these two servers. They're at different data centers, and the oracle server can only be accessed via HTTP. – Omar Mar 10 '11 at 18:14
That's different than what you said before. You said before that it only can be accessed using HTTPS? Can you clarify that? – Guido van Brakel Mar 10 '11 at 18:16
Sorry, I meant that I would like to setup the certificate so that I can access it using HTTPS. Currently, it's being accessed using HTTP by an ASP.NET website. I updated my question. – Omar Mar 10 '11 at 18:57

You have three options I think

  1. Creating your own certificate server. That's quite a lot of work, but it maybe worth the work If you need to deploy more certificates in the future.

  2. Generating a self signed certificate. See here for more information:Create a Self-Signed Server Certificate in IIS 7

  3. Buying an certificate from a certificate provider.

In this scenario you can try first with a self signed certificate, It that doesn't work, or doesn't fulfill your need you can always go with option 1 or option 3.

What I personally don't know is what requirements Oracle has for a certificate of their application server. After some research I found out that you probably have to submit a request a to a certificate authority (CA), which excludes option 2 for you then. See here for you reference: 13 Overview of Secure Sockets Layer (SSL) in Oracle Application Server

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.