|
Home > Archive > IIS Server Security > October 2004 > create own certificate for SSL
You are viewing an archived Text-only version of the thread.
To view this thread in it's original format and/or if you want to reply to
this thread please [click here]
| Author |
create own certificate for SSL
|
|
| John Smith 2004-10-15, 9:25 pm |
| Hi there,
Pretty simple question, I want to setup a mail server at home, and would
like to install a certificate on it for security. But, i dont want to buy
one, as its only really for me, and afew friends. Is there a way to create
your own certificates for IIS? im wanting to play around with exchange 2003
OWA, and am not concerned if theyre not signed certificates from a
certificate authority.
Any suggestions welcome
thanks in advance!
| |
| Ken Schaefer 2004-10-15, 9:25 pm |
| Two options:
a) use a self-signed certificate - you can use the SelfSSL tool in the IIS
6.0 Resource Kit
http://www.microsoft.com/downloads/...&DisplayLang=en
-or-
b) install Microsoft Certificate Services (possibly useful if you want to
issue other certs as well)
http://support.microsoft.com/?id=299525 (the article is for IIS5, but you
follow the same steps for IIS6)
Cheers
Ken
"John Smith" <someone@microsoft.com> wrote in message
news:uTRRfsMsEHA.2556@tk2msftngp13.phx.gbl...
> Hi there,
>
> Pretty simple question, I want to setup a mail server at home, and would
> like to install a certificate on it for security. But, i dont want to buy
> one, as its only really for me, and afew friends. Is there a way to
> create
> your own certificates for IIS? im wanting to play around with exchange
> 2003
> OWA, and am not concerned if theyre not signed certificates from a
> certificate authority.
>
> Any suggestions welcome
>
> thanks in advance!
>
>
| |
| John Smith 2004-10-15, 9:25 pm |
| many thanks.
i hv successfully installed the certificate services, requested a
certificate and approved it. however, this is where im a little troubled,
the type of certificate i am after is to install with IIS, so the
https://exchangeserver.com/exchange will work.
I have generated a certificate request from the IIS on the Exchange server,
however cannot seem to find how to use it with the Certificate services for
Win2k.
Any suggestions?
cheers
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:e5mutMNsEHA.3324@TK2MSFTNGP15.phx.gbl...
> Two options:
>
> a) use a self-signed certificate - you can use the SelfSSL tool in the IIS
> 6.0 Resource Kit
>
http://www.microsoft.com/downloads/...&DisplayLang=en
> -or-
> b) install Microsoft Certificate Services (possibly useful if you want to
> issue other certs as well)
> http://support.microsoft.com/?id=299525 (the article is for IIS5, but you
> follow the same steps for IIS6)
>
> Cheers
> Ken
>
>
> "John Smith" <someone@microsoft.com> wrote in message
> news:uTRRfsMsEHA.2556@tk2msftngp13.phx.gbl...
buy[vbcol=seagreen]
>
>
| |
| Bernard 2004-10-15, 9:25 pm |
| More detail
HOW TO: Obtain a Test Certificate or a Test Client Authentication
Certificate
http://support.microsoft.com/?id=216907
--
Regards,
Bernard Cheah
http://www.tryiis.com/
http://support.microsoft.com/
http://www.msmvps.com/bernard/
"John Smith" <someone@microsoft.com> wrote in message
news:ev$LP$OsEHA.3336@tk2msftngp13.phx.gbl...
> many thanks.
>
> i hv successfully installed the certificate services, requested a
> certificate and approved it. however, this is where im a little troubled,
> the type of certificate i am after is to install with IIS, so the
> https://exchangeserver.com/exchange will work.
>
> I have generated a certificate request from the IIS on the Exchange
server,
> however cannot seem to find how to use it with the Certificate services
for
> Win2k.
>
> Any suggestions?
>
> cheers
>
>
> "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> news:e5mutMNsEHA.3324@TK2MSFTNGP15.phx.gbl...
IIS[vbcol=seagreen]
>
http://www.microsoft.com/downloads/...&DisplayLang=en
to[vbcol=seagreen]
you[vbcol=seagreen]
would[vbcol=seagreen]
> buy
exchange[vbcol=seagreen]
>
>
| |
| Ken Schaefer 2004-10-15, 9:25 pm |
| a) You generate the certificate request, and save it off to a file.
b) Then you go to:
http://certificateServerName/certsrv/
and choose to submit an "advanced certificate request" and paste in the
contents of the cert request from (a)
c) You then use the Certificate Services MMC snapin on the server to approve
the certificate.
d) Now go back to the IIS server, and browse to
http://certificateServerName/certsrv/ again and choose to check the status
of a pending request. You should be able to download the issued certificate
now
e) On the IIS server, now go back to IIS Manager and run the Certificate
wizard again, and choose to install the certificate you downloaded and saved
in (d)
Cheers
Ken
"John Smith" <someone@microsoft.com> wrote in message
news:ev$LP$OsEHA.3336@tk2msftngp13.phx.gbl...
> many thanks.
>
> i hv successfully installed the certificate services, requested a
> certificate and approved it. however, this is where im a little troubled,
> the type of certificate i am after is to install with IIS, so the
> https://exchangeserver.com/exchange will work.
>
> I have generated a certificate request from the IIS on the Exchange
> server,
> however cannot seem to find how to use it with the Certificate services
> for
> Win2k.
>
> Any suggestions?
>
> cheers
>
>
> "Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
> news:e5mutMNsEHA.3324@TK2MSFTNGP15.phx.gbl...
> http://www.microsoft.com/downloads/...&DisplayLang=en
> buy
>
>
| |
| John Smith 2004-10-15, 9:25 pm |
| cheers!
"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:%23%23bqxSPsEHA.3460@TK2MSFTNGP15.phx.gbl...
> a) You generate the certificate request, and save it off to a file.
>
> b) Then you go to:
> http://certificateServerName/certsrv/
> and choose to submit an "advanced certificate request" and paste in the
> contents of the cert request from (a)
>
> c) You then use the Certificate Services MMC snapin on the server to
approve
> the certificate.
>
> d) Now go back to the IIS server, and browse to
> http://certificateServerName/certsrv/ again and choose to check the status
> of a pending request. You should be able to download the issued
certificate
> now
>
> e) On the IIS server, now go back to IIS Manager and run the Certificate
> wizard again, and choose to install the certificate you downloaded and
saved
> in (d)
>
> Cheers
> Ken
>
>
> "John Smith" <someone@microsoft.com> wrote in message
> news:ev$LP$OsEHA.3336@tk2msftngp13.phx.gbl...
troubled,[vbcol=seagreen]
http://www.microsoft.com/downloads/...&DisplayLang=en[vbcol=seagreen]
to[vbcol=seagreen]
you[vbcol=seagreen]
to[vbcol=seagreen]
exchange[vbcol=seagreen]
>
>
|
|
|
|
|