I have to update my SSL certificate for IIS6 on Windows 2003 Server. The vendor (Thawte) tells me that my Certificate Signing Request is non-resignable, which I take to mean that I need to generate a request for a brand new certificate. In the IIS Manager, however, as long as I have the current certificate installed, my only options are:
- Renew the current certificate
- Remove the current certificate
- Replace the current certificate
- Export the current certificate to a .pfx file
- Copy or Move the current certificate to a remote server site
I thought that "Replace" would be the obvious option, but it doesn't give me the choice to create a new request to replace the current certificate; I can only choose between the already-installed certificates on the server. If I "Remove" the current certificate in order to request a new one, would that result in my clients being told immediately that my server was not secured? Or am I misunderstanding Thawte's documentation, and I really can Renew? I've renewed certificates in the past, and I can't imagine that there is no way at all to pull this off without disruption of "SSL secured" status. Thanks in advance.