1
vote
1answer
39 views

SSL Certificate Not Getting Refreshed

I am trying to change the SSL Certificate for my website. I got the new certificate issued by Comodo and installed it on my web servers. My servers are running IIS7.0. I also binded the https ...
1
vote
1answer
31 views

Single IIS, 2 applications, 2 IP addresses, 2 Domains, 2 SSLs

I know there are many questions out there, but none seemed to address specifically what I am after. I have one instance of IIS, with two separate applications on it. Each application works on its ...
0
votes
1answer
43 views

IIS 7 filling disk with millions of certificate files

I've got an ASP.NET website running on IIS 7. Using PA File Sight, I've proven that it is creating 2 to 3 new files in the C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys folder every minute. PA ...
0
votes
1answer
91 views

Will renewing a wildcard SSL certificate on one server invalidate the certificate on other servers?

We have a wildcard SSL certificate that is due to expire in a few weeks. I currently have this certificate installed on six servers. I'd like to renew it on one server first, test it out, and then ...
2
votes
0answers
113 views

Installing RD Gateway on a server with another site already in Default Web Site and listening on port 443?

I have a server running Windows Server 2008 R2, web facing with one website already installed. I would like to also add the RD Gateway services to this machine since it is already accessible form the ...
0
votes
1answer
45 views

About re-use of a Private Key, after exporting it from an IIS server

I have exported a Private Key from an IIS server using one of the many online instructions available. That particular IIS no longer is able to offer HTTPS anymore... Has anybody been in the same ...
0
votes
1answer
52 views

how to confirm ssl certificate will take over after intermediate

Sorry, this is probably a dumb question, but just want some assurance... Installed my first SSL certificate on an IIS 7 server and just want to know if there's a way to verify the SSL certificate will ...
0
votes
0answers
75 views

Use server-side certificate from Smart Card in IIS

I have a Smart Card (actually a USB dongle, called a Feitian ePass2003) with a certificate and its accompanying private key on it, and I want to use this certificate to serve my SSL site in IIS. To ...
0
votes
1answer
207 views

In IIS 7, can you bind more than one SSL certificate to a single website / IP address / port number?

I'm being tasked with binding multiple SSL certificates to the same website. I have a single website with a single domain that the client wants to bind multiple SSL certs from different CAs. So ...
0
votes
2answers
337 views

Can an IP Address be used as the FQDN when requesting a SSL Certificate?

When filling out a request for a SSL Certificate, can the IP address be used for the "Common Name"? update: We have a new production box that doesn't have a public domain name. Just a public IP. But ...
0
votes
0answers
108 views

Why does IIS7 on one server work with my certificate while another has problems?

In the setup I describe, we have two servers, Alpha and Bravo. Alpha is a server that has been around for years. It is a Windows 2008 server running IIS7. In order to log in to any application on ...
2
votes
1answer
905 views

What determines the combination of ciphers available on an SSL server?

I have a site that has been bound to a new SSL certificate with SAN (4 additional names). The certificate has a 2048-bit key. The problem is that it works on some browser/OS combinations but not on ...
1
vote
0answers
206 views

Client Certificates not working with IIS7

I have been trying to get a webservice we are creating to require client certificates for connections for several weeks and haven't been having much luck. I thought that I would attempt to make a ...
0
votes
1answer
184 views

IIS7 SSL certificate caching

I changed certificate in IIS 7, changed bindings on websites, everything OK. But when I'm trying to set my old certificate (and I'm changed bindings too), I still get new certificate instead of old. I ...
0
votes
3answers
2k views

SSL certificate not found in the drop down list - IIS 7

With IIS 7 I succeeded to import a new SSL certificate to the Trusted Root Certification Authority store, and then to the Personal store. In the web site binding properties in IIS manager, I wanted to ...
1
vote
1answer
112 views

Separate Certificate by Subdomain (With multiple IPs)

Note: Yes, I realize this problem is easier to solve by just using 1 multi-domain or wildcard certificate. I wish to have an ASP.NET site running on IIS with 2 SSL domains sharing 1 web application ...
0
votes
2answers
2k views

How do I import certificate (.CER) in IIS

I have created certificates based on this tutorial: http://ondrej.wordpress.com/2010/01/24/iis-7-and-client-certificates/ Then I have imported "MyPersonalCA.cer" on IIS host server based on this ...
0
votes
1answer
943 views

Getting ASN1 bad tag error when trying to complete certificate request in IIS7

I have a multi-domain certificate I'm trying to install on IIS 7.0. When I use the IIS manager to complete certificate request, I get the error: There was an error while performing this operation. ...
3
votes
1answer
314 views

How can two IIS7 domains share SSL port 443 on one IP?

I have two domains: domain1.com and domain2.com. I also have two GoDaddy SSL certificates (one cert for each domain). I only have one IP. I'm running IIS 7 on a Windows Server 2008 R2 standalone ...
1
vote
1answer
300 views

SSL Certificates, two-way authentication and loadbalancers

We're looking to implement two-way authentication with client certificates for a privileged subset of our application users. The idea will be that if a certificate is detected the user will be asked ...
1
vote
2answers
187 views

Why is my SSL certificate saying it's not totally secure?

I've just installed a SSL certificate on my web site, but when I view it in my browser (Chrome), the browser warns me that it's not totally secure: What am I doing wrong, and how do I correct it?
1
vote
2answers
247 views

How to have a certificate which works with both example.com and subdomain.example.com in IIS?

I have an IIS server hosting several websites, like: example.com subdomain1.example.com subdomain2.example.com I want those websites to be able to use SSL. If I install the certificate ...
1
vote
1answer
226 views

Can multiple services (on different ports) use the same SSL cert?

Can I use the same SSL certificate for a Tomcat service on port 443, and for a separate IIS service on some other port? Both services live on the same machine, on the same IP address and have the same ...
3
votes
2answers
402 views

Different SSL Certificate Authorities for domains and subdomains?

Our main site www.example.com has a regular VeriSign SSL certificate. However, we need ssl for our dev environment for accurate testing. Is it possible to use another ssl from a different (cheaper) ...
0
votes
1answer
223 views

SSL Certificate failed install in IIS7

I can't seem to install my SSL in IIS7 because when I do it appears in the Server Certificates list but then if I navigate away from that page or refresh it then it disappears? I don't know if it has ...
0
votes
2answers
583 views

How can I install root or intermediate SSL certificates without restarting server?

For installation of a certificate I needed to install the root and intermediate certificates as well. This was recognized (after IIS reset) by Firefox and IIS at once, but not by IE, Opera or ...
1
vote
2answers
507 views

Secure connections with Domain aliases running on IIS7

I have a site that can be accessed through example.com. I can secure traffic to and from this site by installing a certificate on the web server that is tied to the example domain. Now, I have ...
0
votes
1answer
153 views

binding info for website with SSL running on IIS on Server 2008 R2?

Folks! I have a Windows Server 2008 R2 machine running IIS 7. I'm attempting to create a website that will use SSL. When I create the website, I choose "https" as 'type', "443" as Port and the ...
4
votes
2answers
361 views

Is it possible to create an internal SSL certificate with Subject Alternative Names

Having just upgraded from Exchange 2003 to Exchange 2010, I'm attempting to create a certificate that can be used both internally and externally (by staff). Previously with exchange 2003, we didn't ...
2
votes
2answers
3k views

Exporting SSL Cert private keys in IIS 7.0

In IIS 6 on Server 2003, I can go to a web site's properties and walk through the wizard to generate a new cert request. Once I complete the request and have the cert installed on the web site, I can ...
1
vote
1answer
2k views

Certificate does not have a name

I've successfully managed to install an ssl-certificate in IIS, however the 'Name' column is showing as blank even though I entered a friendly name. Is there any way to rectify this? The screenshot I ...
0
votes
1answer
585 views

Using several SSL certificates on same IP with IIS 7

I've got several domains (different sites with different domains. not sub-domains) which need SSL. I couldn't find a way to make it work - so that each domain will have its SSL certificate, but use ...
1
vote
1answer
192 views

Is including internal servers into ssl certificate a problem?

We deploy a web application (Dynamics CRM) on a single IIS server which should be reachable from the internet. The application is only accessible with HTTPS. Therefore we need a ssl-certificate, ...
0
votes
2answers
761 views

Installing Private and Public Key Certificates On IIS7

I'm not an expert on IIS but every year I really struggle getting a certificate onto an IIS7 server that hosts our ecommerce website. I buy my certificates via 123-reg and I get a GlobalSign private ...
2
votes
1answer
3k views

IIS7 add certificate to site from command line

I've found through APPCMD that most of IIS7 configuration is possible through the command line. One thing I've not figured out how to do yet: in IIS Manager, Bindings -> Edit -> pick an SSL ...
0
votes
2answers
157 views

SSL binding IIS7

I'm not sure I can do what I want to do but here goes... I have the following 2 websites setup on IIS 7 with the bindings specified Production Web Site Bindings: http / www.mydomain.com / 80 ...
6
votes
1answer
5k views

Import .pem into IIS 7

I was given two .pem files to import. I did not generate these files. Can I import them into IIS 7 or do they have to be converted into another format? I know that IIS likes .pfx - can .pem's be ...
1
vote
2answers
796 views

Multiple SSL on same IP [duplicate]

Possible Duplicate: Multiple SSL domains on the same IP address and same port? I have the following situation: first domain: test.domain.com IP: 1.2.3.4 Port: 443 SSL: Purchased from ...
1
vote
5answers
984 views

How to install a single SSL certificate for www and non-www

I have purchased an SSL certificate and I should be able to configure IIS 7 to use that certificate for both https://domainname and https://www.domainname I have looked online but didn't find a ...
3
votes
2answers
2k views

Getting 401 when using client certificate with IIS 7.5

I'm trying to configure a web site hosted under IIS 7.5 so that requests to a specific location require client certificate authentication. With my current setup, I still get a "401 - Unauthorized: ...
1
vote
1answer
3k views

IIS 7.0 install two SSL certificates with two different host headers

I have two sites: sub1.example.org sub2.example.org I have two SSL certificates for each of the above domains. When install certificate #2 for sub2.example.org, it tells me: At least one other ...
0
votes
2answers
141 views

IIS7 Certificate recovery

One of my servers has just failed. I am unable to get it to boot. I have built a replacement server on new hardware, but I have just discovered that the SSL cerrtificate we purchased through VeriSign ...
0
votes
3answers
1k views

Wildcard SSL on IIS7 - Does each site need it's own IP?

If I buy a Wildcard SSL Certificate for one domain, like: domain.com and I have 40 sites, like apples.domain.com and pears.domain.com All the sites are on the same IIS 7 server Does each site need a ...
3
votes
2answers
2k views

Error importing SSL certificate in Windows Server 2008 R2

When I click the "Complete Certificate Request" link in IIS 7, I get this error: Cannot find the certificate request that is associated with this certificate file. A certificate request must ...
2
votes
1answer
617 views

What actually happens when I use IIS to generate an SSL certificate, especially during the import operation? Is this the only way?

I get the basic idea of public/private key pairs, but what I don't know is what is the inner workings of what IIS does when generating an SSL key. One thing that makes me think there is more under ...
1
vote
1answer
2k views

creating client certificates

I've got an SSL certificate from the 3rd party certificate authority. It's a .cer file. The certificate is installed and working properly in IIS7. The certificate displays its Intended Purposes as ...
1
vote
1answer
783 views

ASN1 bad tag when completing ssl certificate request in IIS7

Consider a scenario of importing a .cer file for use in IIS 7. The CSR was NOT created on this machine. After receiving a .cer file from the CA, the Complete Certificate Request wizard prompts for ...
2
votes
3answers
2k views

SSL stops working on IIS7 after a reboot

I have a Windows 2008 Server with IIS7. Every time the server reboots, SSL stops working. Normal HTTP requests work fine, but any request to an HTTPS address gives the typical error message in the ...
0
votes
1answer
1k views

IIS 7 with verisign certificate, invalid certificate returned

We have IIS7 on windows 2008 and we installed verisign certificate and bound it to https. Certificate seems fine. Chain: mysite.com - not expired VeriSign international server CA class 3 - not ...
0
votes
1answer
2k views

PEM file to IIS 7

I have a PEM file issued by a 3rd party, whose API I'm leveraging. How can I get this into IIS 7?