|
I'm trying to import a certificate to IIS. Everything is ok on the MMC (Windows Console). I finished the wizards and seems that is all right. But, when I refresh the certificate list or move to other screen of IIS, the certificate disappear from the list. I don't have idea what is the problem. What can I do? |
||||
|
|
|
This issue happens when the imported cert does not have a private key associated. If someone is trying to import a domain level certificate to IIS, then we cannot import if the certificate does not have a private key associated and will cause certificate disappears on refresh. Solution would be to import the .CER file to your system(from where certificate is requested) personel store and export it with private key. Then copy the .pfx file to required server and import it from server certificate option under IIS. This would fix the issue. |
|||
|
|
|
Is this in IIS 6 or IIS 7? Did you import it in the MMC console or in IIS? Try importing it in the MMC console first, and then selecting it in IIS. Also, make sure that the file you are importing is a .pfx file that includes the private key. |
|||
|
|
|
Use the cert manager to import the file. From there, try to export. If you can't export as a PFX file, I believe that means there's no private key in the cert. You may have downloaded the wrong one from your CA. I'm dealing with our CA now, so I'm not 100% certain about this yet. |
|||
|
|
|
So, after struggling with this for a few hours, redownloading the cert spending time on the phone with tech support,and looking at every blog I could find, I was stumped. I tried resubmitting the cert request to regenerate the cert (no luck). With a last ditch effort I regenerated the cert request and rekeyed the cert and now it works fine. I don't know what happened and I was very careful keying in my data both times. My solution was simply to generate a new request and rekey the cert. |
|||
|
|
I have the same problem with an IIS cert (w/ private key, .pfx) after importing into the MMC Local/Personal/Certificate node on a Windows server 2008R2 machine. The cert imports fine, says it's good with CA that is also good. I can then configure my proxy server (TMG 2010) to use the cert in a web listener. Everything works great and the web listener and subsequent rules that use the listener all work fine. After some time, I haven't tried to time it yet, the cert disappears from the MMC L/P/C node. My TMG listener still shows that cert as being the one it's configured to use, but the actual cert is gone. |
|||
|
|
|
I've found the problem can be reproduced when the leaf certificate has been installed under Intermediate Certification Authorities. Removing it (and leaving any real intermediate, if applicable) then completing the wizard corrects the problem. |
|||
|
|
|
I had this problem as well and resolved it by using OpenSSL to create the correct .pfx file. Instructions for this can be found here |
|||
|
|
