Recent additions to the Knowledge Base from Integral Hosting http://www.integralhelp.com/KB/c22/windows-2003.aspx

Sat, 04 Sep 2010 17:28:56 GMT

SmarterTrack Professional 3.6.3267 http://www.integralhelp.com/KB/a25/certificate-installation-microsoft-iis-5x-6x.aspx Tue, 01 Jul 2008 17:23:07 GMT kbarticle25 <H3>Installing your IIS SSL Certificate on Microsoft IIS 5.x / 6.x</H3> 1. Select Administrative Tools<BR> <BR> 2. Start Internet Services Manager<BR> <BR> 3. Open the properties window for the website. You can do this by right clicking on the Default Website and selecting Properties from the menu<BR> <BR> 4. Open Directory Security by right clicking on the Directory Security tab<BR> <BR> 5. Click Server Certificate. The following Wizard will appear:<BR> <BR> 6. Choose to Process the Pending Request and Install the Certificate. Click Next<BR> <BR> 7. Enter the location of your IIS SSL certificate (you may also browse to locate your IIS SSL certificate), and then click Next<BR> <BR> 8. Read the summary screen to be sure that you are processing the correct certificate, and then click Next<BR> <BR> 9. You will see a confirmation screen. When you have read this information, click Next<BR> <BR> 10. You now have an IIS SSL server certificate installed http://www.integralhelp.com/KB/a24/csr-generation-microsoft-iis-5x-6x.aspx Tue, 01 Jul 2008 17:20:36 GMT kbarticle24 <H3>Generating an IIS SSL Certificate Signing Request (CSR) using Microsoft IIS 5.x / 6.x</H3> <P>A CSR is a file containing your IIS SSL certificate application information, including your Public Key. Generate your CSR and then copy and paste the CSR file into the webform in the enrollment process:</P> <H4>Generate keys and Certificate Signing Request:</H4> <UL> <LI>Select <STRONG>Administrative Tools</STRONG> <LI>Start <STRONG>Internet Services Manager</STRONG> <LI>Open the properties window for the website the CSR is for. You can do this by right clicking on the Default Website and selecting Properties from the menu <LI>Open <STRONG>Directory Security </STRONG>by right clicking on the Directory Security tab <LI>Click <STRONG>Server Certificate</STRONG>. The following Wizard will appear: <LI>Click <STRONG>Create a new certificate</STRONG> and click <STRONG>Next</STRONG>. <LI>Select <STRONG>Prepare the request</STRONG> and click <STRONG>Next</STRONG>. <LI>Provide a name for the certificate, this needs to be easily identifiable if you are working with multiple domains. This is for your records only. <LI>If your server is 40 bit enabled, you will generate a 512 bit key. If your server is 128 bit you can generate up to 1024 bit keys. We recommend you stay with the default of 1024 bit key if the option is available. Click <STRONG>Next</STRONG> <LI>Enter <STRONG>Organisation</STRONG> and <STRONG>Organisation Unit</STRONG>, these are your company name and department respectively. Click <STRONG>Next</STRONG> <LI><SPAN>The Common Name field should be the <STRONG><FONT color=#cc0000>Fully Qualified Domain Name</FONT></STRONG> (FQDN) or the web address for which you plan to use your IIS SSL Certificate, e.g. the area of your site you wish customers to connect to using SSL. For example, an SSL Certificate issued for <STRONG>yourdomain.com</STRONG> will not be valid for <STRONG>secure.yourdomain.com</STRONG>. If the web address to be used for SSL is <STRONG>secure.yourdomain.com</STRONG>, ensure that the common name submitted in the CSR is <STRONG>secure.yourdomain.com</STRONG>.</SPAN> Click <STRONG>Next</STRONG>. <LI>Enter your <STRONG>country</STRONG>, <STRONG>state</STRONG> and <STRONG>city</STRONG>. Click <STRONG>Next</STRONG>. <LI>Enter a filename and location to save your CSR. You will need this CSR to enroll for your IIS SSL Certificate. Click <STRONG>Next</STRONG>. <UL> <LI>Check the details you have entered. If you have made a mistake click <STRONG>Back</STRONG> and amend the details. Be especially sure to check the domain name the Certificate is to be "Issued To". Your IIS SSL Certificate will only work on this domain. Click <STRONG>Next</STRONG> when you are happy the details are absolutely correct. </LI> </UL> <UL> <LI>When you make your application, make sure you include the CSR in its entirety into the appropriate section of the enrollment form - including<BR> <STRONG>-----BEGIN CERTIFICATE REQUEST-----to-----END CERTIFICATE REQUEST-----</STRONG> <LI>Click <STRONG>Next</STRONG> <LI>Confirm your details in the enrollment form <LI>Finish </LI> </UL> <LI> <H4>To save your private key:</H4> <UL> <LI>Go to: <STRONG>Certificates</STRONG> snap in in the MMC <LI>Select <STRONG>Requests</STRONG> <LI>Select <STRONG>All tasks</STRONG> <LI>Select <STRONG>Export</STRONG> </LI> </UL> </LI> </UL> We recommend that you make a note of your password and backup your key as these are known only to you, so if you loose them we can't help! A&nbsp;removable media is recommended for your backup files.