Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have created certificates based on this tutorial:

http://ondrej.wordpress.com/2010/01/24/iis-7-and-client-certificates/

Then I have imported "MyPersonalCA.cer" on IIS host server based on this tutorial:

http://www.networksolutions.com/support/installation-of-an-ssl-on-certificate-microsoft-iis-7-x/

I had to import the certificate via MMC, because IIS is giving me an error:

"Cannot find the certificate request associated with this certificate file. A certificate request must be completed on the computer where it was created."

As stated this is a known bug, but i cant get pass the error.

I have imported certificate in Certificate (LocalComputer) snap in and provided a friendly name. It all looks ok.

But i still cant select the certificate on my webpage binding in IIS when trying to enable SSL.

EDIT

Ok I went as suggested and issued the .CER file via CertAuthority. On another machine I have installed Windows Server and CA. I have created a request in IIS and issued myself a .CER file. This file I can normaly import to Windows7 IIS.

But now I want to create client certificates. The certificate is missing PVK file and i cant create client certificates as described in the first link.

Will post another question ...

System: Windows7 Home Premium SP1 32bit,IIS 7.5

Can someone point me to the right direction on this?

share|improve this question
add comment

2 Answers 2

up vote 5 down vote accepted

You may have to reissue your cert using a new CSR check out the following link. It is similar to the directions you have already followed but with a little more instruction to getting around this error.

http://www.digicert.com/ssl-certificate-installation-microsoft-iis-7.htm

share|improve this answer
    
Ok i get you, but i created the certificate via makecert.exe, because I do not have CA installed. Also the client certificates are created from this certificate as shown in my first link. Does that mean I will be able to re-create the cleint certificates with makecert.exe using this new certificate? Please enlighten a man wondering in the dark ... –  no9 Sep 5 '12 at 14:03
    
This is just too weird. –  no9 Sep 20 '12 at 11:35
add comment

Looks like you have to recreate a cert and get a new csr, but I'd do it through ssltools manager because you won't have to deal with mmc or snap-ins or commands. You'd just right click the cert and click 'create new csr'

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.