IIS Server Security - SSL security question

This is Interesting: Free IT Magazines  
Home > Archive > IIS Server Security > November 2005 > SSL security question





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author SSL security question
Francisco Lopez

2005-11-02, 5:52 pm

We recently upgraded our server to Win 2003 - from nt4.

We created a SSL Certificate backup key according to this instructions:
HOW TO: Import and Export an IIS 4.0 Certificate by Using Key Manager
http://support.microsoft.com/defaul...;en-us;324904#2

My question is: can I import this nt4 backup key file - and thus the certificate
- into the Windows 2003 box?

So far, i am getting an incorrect password or your certificate has expired
error message.

Francisco,
http://franjalova.monoforge.com/


Tim

2005-11-04, 5:57 pm

I would notify your CA. I don't think you can since the 4.0 key and
subsequent backup/export was based on an original 4.0 key request by IIS 4.0.
I don't think 6.0 on your new box will appreciate what you're trying to do
and it sounds like this is the problem you're having.

See if your CA will reissue the certificate from a 6.0 request at little or
no charge.

"Francisco Lopez" wrote:

> We recently upgraded our server to Win 2003 - from nt4.
>
> We created a SSL Certificate backup key according to this instructions:
> HOW TO: Import and Export an IIS 4.0 Certificate by Using Key Manager
> http://support.microsoft.com/defaul...;en-us;324904#2
>
> My question is: can I import this nt4 backup key file - and thus the certificate
> - into the Windows 2003 box?
>
> So far, i am getting an incorrect password or your certificate has expired
> error message.
>
> Francisco,
> http://franjalova.monoforge.com/
>
>
>

Francisco Lopez

2005-11-14, 5:56 pm

Hello Tim,
Thanks, will do. It is almost time to renew anyhow.

Francisco,
http://franjalova.monoforge.com/
[vbcol=seagreen]
> I would notify your CA. I don't think you can since the 4.0 key and
> subsequent backup/export was based on an original 4.0 key request by
> IIS 4.0.
> I don't think 6.0 on your new box will appreciate what you're trying
> to do
> and it sounds like this is the problem you're having.
> See if your CA will reissue the certificate from a 6.0 request at
> little or no charge.
>
> "Francisco Lopez" wrote:
>


Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com